<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1103"><package pkgid="31a8b4514d9f8748e443ec3df2f205102747b8ea769217ce25cb6071bea91efc" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="bbf022046754e74ea7042a8df5dbc2a3369bf1496e5ecee2d8cea5f5d69933b8" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="de9cdb781bac8a0210645ca8a9370c5f493d4dbfd7cd6c74bf036726cfab3418" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="5c953ad80e17cb4cb884bbba3645c4be4f473a769cc0140b291b9c15603b92bb" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="680c5af7982cfc08397fa4b39cc39004bc1e41bd2f188836f185a83f3e455ce7" name="MozillaFirefox-debuginfo" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="cee9e6b74c9126544f79ff0a131e58831363bec488d40a1f5a2599b16ad85a0a" name="MozillaFirefox-debugsource" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="f6c501047e7dc3ce057df53c7b57ed9b8788e3145d91d2337e027e941b787f58" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="bb14bdb28dd541c70124b91c47611274ed4d21e37d5e4917761fd7251dc424fd" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="a082e592ff20f7e9025c0521cc29b4883221cfc67cc8888a4a9abc5508736414" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="42.0" rel="3.5"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="5a6759f3a0899555f7bf3fdb5a8a983bbf5b1e8a56d244f44d077adb36eecdbc" name="aaa_base" arch="src">
    <version epoch="0" ver="13.2+git20140911.61c1681" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1397649600">- remove mkinitrd script for mtab</changelog>
<changelog author="ro@suse.de" date="1399636800">- fix error message if zsh sources xdg-environment.sh if some pathes do not exist (bnc#875118)</changelog>
<changelog author="werner@suse.de" date="1401883200">- Enable service script to return LSB status exit values (bnc#880103)</changelog>
<changelog author="ro@suse.com" date="1404302400">- drop re-creation of before.local and add a comment about not
  being supported if it had real content (bnc#869177)
- mark /etc/init.d/{boot,halt,after}.local as ghost (bnc#868416)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="ro@suse.com" date="1405339200">- drop hint about PREVLEVEL from after.local comments (bnc#886176)</changelog>
<changelog author="werner@suse.de" date="1405598400">- In emacs the tcsh may used non-interactively (bnc#882579)</changelog>
<changelog author="werner@suse.de" date="1405944000">- Avoid libGL error via ssh (bnc#869172)</changelog>
<changelog author="werner@suse.de" date="1405944001">- Do not touch nor modify permissions if e.g. /root/.bash_history
  is a link to e.g. /dev/null (bnc#883260)</changelog>
<changelog author="werner@suse.de" date="1406116800">- Avoid trouble with new ksh93v- 2014-06-25 and zsh shell code (bnc#888237)</changelog>
<changelog author="werner@suse.de" date="1406203200">- Add ls.zsh to file list</changelog>
<changelog author="ro@suse.de" date="1406635200">- add inittab as ghost config</changelog>
<changelog author="lnussel@suse.de" date="1407844800">- Muffle libGL error message when run under ssh (bnc#890189)</changelog>
<changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
<changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
<changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
<changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
<changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
<changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>

</package>
<package pkgid="cb2caf4e6ad3e14323e02df9b602fa79570bcb5c489ebf23bf400c9898e662f1" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.2+git20140911.61c1681" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1397649600">- remove mkinitrd script for mtab</changelog>
<changelog author="ro@suse.de" date="1399636800">- fix error message if zsh sources xdg-environment.sh if some pathes do not exist (bnc#875118)</changelog>
<changelog author="werner@suse.de" date="1401883200">- Enable service script to return LSB status exit values (bnc#880103)</changelog>
<changelog author="ro@suse.com" date="1404302400">- drop re-creation of before.local and add a comment about not
  being supported if it had real content (bnc#869177)
- mark /etc/init.d/{boot,halt,after}.local as ghost (bnc#868416)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="ro@suse.com" date="1405339200">- drop hint about PREVLEVEL from after.local comments (bnc#886176)</changelog>
<changelog author="werner@suse.de" date="1405598400">- In emacs the tcsh may used non-interactively (bnc#882579)</changelog>
<changelog author="werner@suse.de" date="1405944000">- Avoid libGL error via ssh (bnc#869172)</changelog>
<changelog author="werner@suse.de" date="1405944001">- Do not touch nor modify permissions if e.g. /root/.bash_history
  is a link to e.g. /dev/null (bnc#883260)</changelog>
<changelog author="werner@suse.de" date="1406116800">- Avoid trouble with new ksh93v- 2014-06-25 and zsh shell code (bnc#888237)</changelog>
<changelog author="werner@suse.de" date="1406203200">- Add ls.zsh to file list</changelog>
<changelog author="ro@suse.de" date="1406635200">- add inittab as ghost config</changelog>
<changelog author="lnussel@suse.de" date="1407844800">- Muffle libGL error message when run under ssh (bnc#890189)</changelog>
<changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
<changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
<changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
<changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
<changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
<changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>

</package>
<package pkgid="3f230c12c728c1a57e97b3f4ae895d112053846d320affa9887fc1866b73ec27" name="aaa_base-debuginfo" arch="x86_64">
    <version epoch="0" ver="13.2+git20140911.61c1681" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1397649600">- remove mkinitrd script for mtab</changelog>
<changelog author="ro@suse.de" date="1399636800">- fix error message if zsh sources xdg-environment.sh if some pathes do not exist (bnc#875118)</changelog>
<changelog author="werner@suse.de" date="1401883200">- Enable service script to return LSB status exit values (bnc#880103)</changelog>
<changelog author="ro@suse.com" date="1404302400">- drop re-creation of before.local and add a comment about not
  being supported if it had real content (bnc#869177)
- mark /etc/init.d/{boot,halt,after}.local as ghost (bnc#868416)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="ro@suse.com" date="1405339200">- drop hint about PREVLEVEL from after.local comments (bnc#886176)</changelog>
<changelog author="werner@suse.de" date="1405598400">- In emacs the tcsh may used non-interactively (bnc#882579)</changelog>
<changelog author="werner@suse.de" date="1405944000">- Avoid libGL error via ssh (bnc#869172)</changelog>
<changelog author="werner@suse.de" date="1405944001">- Do not touch nor modify permissions if e.g. /root/.bash_history
  is a link to e.g. /dev/null (bnc#883260)</changelog>
<changelog author="werner@suse.de" date="1406116800">- Avoid trouble with new ksh93v- 2014-06-25 and zsh shell code (bnc#888237)</changelog>
<changelog author="werner@suse.de" date="1406203200">- Add ls.zsh to file list</changelog>
<changelog author="ro@suse.de" date="1406635200">- add inittab as ghost config</changelog>
<changelog author="lnussel@suse.de" date="1407844800">- Muffle libGL error message when run under ssh (bnc#890189)</changelog>
<changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
<changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
<changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
<changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
<changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
<changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>

</package>
<package pkgid="db60e34ec220464181f4e316c814893d3839e16d51f6db0b7d0e6be5ba684c83" name="aaa_base-debugsource" arch="x86_64">
    <version epoch="0" ver="13.2+git20140911.61c1681" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1397649600">- remove mkinitrd script for mtab</changelog>
<changelog author="ro@suse.de" date="1399636800">- fix error message if zsh sources xdg-environment.sh if some pathes do not exist (bnc#875118)</changelog>
<changelog author="werner@suse.de" date="1401883200">- Enable service script to return LSB status exit values (bnc#880103)</changelog>
<changelog author="ro@suse.com" date="1404302400">- drop re-creation of before.local and add a comment about not
  being supported if it had real content (bnc#869177)
- mark /etc/init.d/{boot,halt,after}.local as ghost (bnc#868416)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="ro@suse.com" date="1405339200">- drop hint about PREVLEVEL from after.local comments (bnc#886176)</changelog>
<changelog author="werner@suse.de" date="1405598400">- In emacs the tcsh may used non-interactively (bnc#882579)</changelog>
<changelog author="werner@suse.de" date="1405944000">- Avoid libGL error via ssh (bnc#869172)</changelog>
<changelog author="werner@suse.de" date="1405944001">- Do not touch nor modify permissions if e.g. /root/.bash_history
  is a link to e.g. /dev/null (bnc#883260)</changelog>
<changelog author="werner@suse.de" date="1406116800">- Avoid trouble with new ksh93v- 2014-06-25 and zsh shell code (bnc#888237)</changelog>
<changelog author="werner@suse.de" date="1406203200">- Add ls.zsh to file list</changelog>
<changelog author="ro@suse.de" date="1406635200">- add inittab as ghost config</changelog>
<changelog author="lnussel@suse.de" date="1407844800">- Muffle libGL error message when run under ssh (bnc#890189)</changelog>
<changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
<changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
<changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
<changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
<changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
<changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>

</package>
<package pkgid="e89219ef6c23006a98bdebca94d12896948ae01fe1d99ebbe65fdf14bd426441" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.2+git20140911.61c1681" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1397649600">- remove mkinitrd script for mtab</changelog>
<changelog author="ro@suse.de" date="1399636800">- fix error message if zsh sources xdg-environment.sh if some pathes do not exist (bnc#875118)</changelog>
<changelog author="werner@suse.de" date="1401883200">- Enable service script to return LSB status exit values (bnc#880103)</changelog>
<changelog author="ro@suse.com" date="1404302400">- drop re-creation of before.local and add a comment about not
  being supported if it had real content (bnc#869177)
- mark /etc/init.d/{boot,halt,after}.local as ghost (bnc#868416)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="ro@suse.com" date="1405339200">- drop hint about PREVLEVEL from after.local comments (bnc#886176)</changelog>
<changelog author="werner@suse.de" date="1405598400">- In emacs the tcsh may used non-interactively (bnc#882579)</changelog>
<changelog author="werner@suse.de" date="1405944000">- Avoid libGL error via ssh (bnc#869172)</changelog>
<changelog author="werner@suse.de" date="1405944001">- Do not touch nor modify permissions if e.g. /root/.bash_history
  is a link to e.g. /dev/null (bnc#883260)</changelog>
<changelog author="werner@suse.de" date="1406116800">- Avoid trouble with new ksh93v- 2014-06-25 and zsh shell code (bnc#888237)</changelog>
<changelog author="werner@suse.de" date="1406203200">- Add ls.zsh to file list</changelog>
<changelog author="ro@suse.de" date="1406635200">- add inittab as ghost config</changelog>
<changelog author="lnussel@suse.de" date="1407844800">- Muffle libGL error message when run under ssh (bnc#890189)</changelog>
<changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
<changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
<changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
<changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
<changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
<changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>

</package>
<package pkgid="aacd2edde3f181724447cdd66df48bf7a3a8f000600b1da4733c204b684e5664" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.2+git20140911.61c1681" rel="7.1"/>

<changelog author="lnussel@suse.de" date="1397649600">- remove mkinitrd script for mtab</changelog>
<changelog author="ro@suse.de" date="1399636800">- fix error message if zsh sources xdg-environment.sh if some pathes do not exist (bnc#875118)</changelog>
<changelog author="werner@suse.de" date="1401883200">- Enable service script to return LSB status exit values (bnc#880103)</changelog>
<changelog author="ro@suse.com" date="1404302400">- drop re-creation of before.local and add a comment about not
  being supported if it had real content (bnc#869177)
- mark /etc/init.d/{boot,halt,after}.local as ghost (bnc#868416)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="ro@suse.com" date="1405339200">- drop hint about PREVLEVEL from after.local comments (bnc#886176)</changelog>
<changelog author="werner@suse.de" date="1405598400">- In emacs the tcsh may used non-interactively (bnc#882579)</changelog>
<changelog author="werner@suse.de" date="1405944000">- Avoid libGL error via ssh (bnc#869172)</changelog>
<changelog author="werner@suse.de" date="1405944001">- Do not touch nor modify permissions if e.g. /root/.bash_history
  is a link to e.g. /dev/null (bnc#883260)</changelog>
<changelog author="werner@suse.de" date="1406116800">- Avoid trouble with new ksh93v- 2014-06-25 and zsh shell code (bnc#888237)</changelog>
<changelog author="werner@suse.de" date="1406203200">- Add ls.zsh to file list</changelog>
<changelog author="ro@suse.de" date="1406635200">- add inittab as ghost config</changelog>
<changelog author="lnussel@suse.de" date="1407844800">- Muffle libGL error message when run under ssh (bnc#890189)</changelog>
<changelog author="thomas.blume@suse.com" date="1409659200">- modify fate-314974.patch to avoid reprocessing of new /etc/sysconfig/cron</changelog>
<changelog author="lnussel@suse.de" date="1410177600">- update service man page
- always pass --full to systemctl (bnc#882918)</changelog>
<changelog author="lnussel@suse.de" date="1410436800">- remove no longer supported sysconfig settings (bnc#721682)
- remove /etc/mailcap (bnc#856725, bnc#842938)
- add Makefile target to update mimetypes</changelog>
<changelog author="ro@suse.de" date="1410436801">- adding more info to chkconfig list mode output for systemd (bnc#863781)</changelog>
<changelog author="thomas.blume@suse.com" date="1418817600">- update fate-314974.patch since user based exclude is now implemented
  into systemd binary (bnc#903009)</changelog>
<changelog author="ro@suse.de" date="1445256000">- add some patches from git master:
  - afd04c2500406fc26c30898c8a6b31b1881b8857 from Andreas Jaeger
    Fix spelling of SUSE
    Fix spelling in README and comments.
  - f7660b46d8cdbec18e2fc149f40a296cc4fb91ae from Andrei Borzenkov
    Avoid sourcing /etc/bash_completion.d twice (bnc#907873)
  - 4c9ce1005de47b75b774f914c52dcb5d42f1cc7e from Werner Fink
    Even if GDM has done language setup the personal .i18n should
    be sourced (see also bnc#950892)
  - c745414060676fc15b275a14e82b060e80305878 from Werner Fink
    Correct the boolean in /etc/profile.d/lang.sh
  - be5760cab096493812ebe05d33d44db021d509e6 from Werner Fink
    Handle also command lines starting with the env command
    as this is used by gnome xsessions (bsc#921172)
  - 4a32a7a42fae1ae52d7a141c3ba3f10b443b8f7a from Ruediger Oertel
    add SOCKS5_SERVER and socks_proxy to proxy settings (bnc#928398)
  - 427db470e66738bd4262e68911614ba124593576 from Petr Tesarik
    Enable SysRq dump by default</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#942734
  - git-08-9b67611008adbb92fd0ebc9047f63036eb9e6d3d.patch
    Remove references to suseconfig and unused variables
  - git-09-919d7d4426ea868ffa10a18b87a6027e7555bca3.patch
    Restore CWD_IN_ROOT_PATH and CWD_IN_ROOT_PATH
  - git-10-f95fe37ac19c11c1294173b44e6a7567d842cd75.patch
    Fix indentation
  - this removes the references to sysconfig/suseconfig but
    actually keeps evaluating the CWD_IN_ variables in the scripts
- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string
- add patches from git master for bnc#915259
  - git-12-ca4b24d3a82ce55701931ecb94582b61a95cae81.patch
    suse.de-backup-rc.config: trigger also if only files changed
    that have spaces in their name</changelog>

</package>
<package pkgid="226acd0d6ec3e6b9c3d079ba0cc24fb8cdb971900d58b958966c15824d097c2c" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="5224b05880d0f87dc72e6ba0c15f7b073d6d2cb4132748b232aec7c8ce219a67" name="apache2-mod_php5-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="f9456f3e93297bcc18028cd8ec7cfab85f2162321f05af3cb556aca38ef8461f" name="audiofile" arch="src">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="crrodriguez@suse.de" date="1231848000">- remove static libraries and "la" files
- run make check</changelog>
<changelog author="msuman@suse.de" date="1232452800">- Clean up the spec file to use proper RPM macros
- Continue to provide the "la" files for SUSE releases &lt;= 11.1</changelog>
<changelog author="mauro@suse.de" date="1232452801">- Added bnc_463220.patch to fix bnc#463220
  + Correct buffer size.</changelog>
<changelog author="mboman@suse.de" date="1235304000">- Don't use -fno-strict-aliasing for build. Not needed
- Remove CFLAGS, CXXFLAGS and FFLAGS since it only contains
  $RPM_OPT_FLAGS which is default</changelog>
<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="06ffcabd18369f2182b61da01fdae85ab4ef7843d6e41febd195e31aa2e4c264" name="audiofile" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="ac3b93ab7a439a6f415aa271f566feb25c0a6e7d02182314fda422f286bf27ad" name="audiofile-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="crrodriguez@suse.de" date="1231848000">- remove static libraries and "la" files
- run make check</changelog>
<changelog author="msuman@suse.de" date="1232452800">- Clean up the spec file to use proper RPM macros
- Continue to provide the "la" files for SUSE releases &lt;= 11.1</changelog>
<changelog author="mauro@suse.de" date="1232452801">- Added bnc_463220.patch to fix bnc#463220
  + Correct buffer size.</changelog>
<changelog author="mboman@suse.de" date="1235304000">- Don't use -fno-strict-aliasing for build. Not needed
- Remove CFLAGS, CXXFLAGS and FFLAGS since it only contains
  $RPM_OPT_FLAGS which is default</changelog>
<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="29a7695efb5d79e6602228c091ab40e2a97313d625a23d90a78c3ac211c0a96b" name="audiofile-debugsource" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="a56e8f98269472677b52f15c82cfeff21225aeeda85481e4574f4c299c9d58b9" name="audiofile-devel" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="4d067be794ca77c3c40a39641f24e88c589ec52ae6c657ebee0727fb1d463b70" name="audiofile-devel-32bit" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="1943447e68b2bc2dfbaee535ea44efd2371d3e7524bf1c89036309a60aec3bab" name="audiofile-doc" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="2e752ee7d2288493565c8d3990bacad010fcc989705d29e847e6b0cbce45a209" name="avahi" arch="src">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="d7e82f9ea27fc2635e5089f32af5641c475055ed9abc161b080e95ba94436c11" name="avahi" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="8daec996c6132c308e3116cd9fc17073e413aedc5125b13967d3266e337f3842" name="avahi-autoipd" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="f17eceb2bcd2a67704b507d10692d9b35ba3956bf02627dd701777ce87a82952" name="avahi-autoipd-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="56f4de05c28e488ae2087230675b352c8383f2c5e88245dbb09aaf85ea1bcdb9" name="avahi-compat-howl-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="3656015d212b59b880d5befd25561352c5aee2d7fa6350c3ccfda7ece92108f8" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="b43dd97101c9265729257fe9eabaa242662595c4c14af4c419e35325a0f97550" name="avahi-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="ff9796d327f18481f7ac4cef77eb31f6cb16966063b9f6f8541b49e8a20139e3" name="avahi-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="7cf141666d5c25033d1c737cf3b03cd955f490afb36fa7c6e55a96b71f0184b7" name="avahi-debugsource" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="f7597574108c3717501b2795a4a6e4d6ef5e4bc35778e9afc63edbd392442bd8" name="avahi-glib2" arch="src">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
<changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
<changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="1fdc4358d897fb4eb0d90cfdcb7bcc4c1bb1cb9e45ae4acf907e36bcbbe8d750" name="avahi-glib2-debugsource" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="f86467183869cfc48978451090f8421f6e937a64b080a0fddd618e7a0f5f4465" name="avahi-lang" arch="noarch">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="d5a581cd3f11a10515092aac29f80c3f8136aea1adfc75c059ca97c2b2b2c7eb" name="avahi-mono" arch="src">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="aj@suse.de" date="1184587200">- Create new spec file to avoid build cycle avahi-&gt;gnome-&gt;mono-&gt;avahi.</changelog>
<changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
<changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
<changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
<changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="87af1541c27a0e51cc870955f80c58d0b05af9b24cde97bb78ea5e8593ec5edb" name="avahi-mono" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
<changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
<changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
<changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="81a903bff1b7c57039c07c4254453578251ddc1ccd59b1c7aa83e087e6bd6228" name="avahi-qt4" arch="src">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="6286a269e7c75e78d3341e67c76e089d010bb85691761d61547a35869d73b7b9" name="avahi-qt4-debugsource" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="ab5075cd78ab18bb0e17d4480c079a893139c59690a15f353f314541a918de0f" name="avahi-utils" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="a1f20ccb260b191453ba7da892cbe8d009275b8346aea6a3a0153a6cdf791150" name="avahi-utils-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="e9ee1e0bacdad8e28ec2974434b06adc761e18dc1d8dcd74b56e65345be04e96" name="avahi-utils-gtk" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="51419a32c29005c5eb9401607fe2dfee25be79ae2703b50680f694f285a107d1" name="avahi-utils-gtk-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="38f09039a4cec35009cc4bada442cdfc6754c8c86992b131f9e5a87e2d5ec993" name="blender" arch="src">
    <version epoch="0" ver="2.75a" rel="4.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1382356800">- Disable sse2 instructions on non x86_64 arches, bnc#846545</changelog>
<changelog author="badshah400@gmail.com" date="1384689600">- Update to version 2.69 (for the full list see
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.69):
  + Modeling:
  - A new hidden wire display option was added to help with
    retopology
  - Mesh Bisect is a new tool to cut meshes in half
  - The Bridge, Edgenet fill, Grid fill and Symmetrize tools
    were improved
  - New curve and lattice editing tools were added too
  + Cycles Rendering:
  - Hair rendering was improved with a new Hair shader and
    reorganized settings
  - Subsurface scattering uses a new sampling algorithm and now
    supports bump mapping and texture blurring
  - Sky rendering now uses a more accurate sky model
  - New blackbody, vector transform and HSV nodes were added
  - The non-progressive integrator was renamed to Branched Path
    Integrator, and is now available for GPU rendering
  + Motion tracker now supports plane tracking, which can be used
    to replace billboards, screens and other flat things in
    footage
  + Lists in the user interface can now be resized, sorted and
    filtered
  + Small improvements for vertex parenting, empty objects, the
    shrinkwrap modifier, mask editing, armatures, f-curves and
    drivers
  + Addons:
  - FBX Import support has been added
  - FBX/OBJ can now export split normals (without the need for
    the edge split modifier)
  + Fixes for over 270 bugs.</changelog>
<changelog author="coolo@suse.de" date="1388577600">- add constraints file to avoid building on low memory (needed for
  x86_64, but it can't be limited to that arch)</changelog>
<changelog author="stephan.barth@suse.com" date="1396440000">- update to version 2.70
  Upstream changes:
  + Volumetric rendering support has been added to Cycles
  + motion tracking now supports weighted tracks
  + many user interface improvements have been made
  + New threaded dependency graph evaluation has been added
  + a laplacian deform modifier and a wireframe modifier have been added as
    well
  + many improvements to the existing toolset
  + over 560 bugfixes
- Fixed building for Python 3.4
- Delete .gitignore file
- Extended fdupes call to remove locale duplicates
- Rewrote file liste to avoid duplicate files in main and lang package. Also
  explicitly name directories.
- removed blender-2.64a-fix-locale-files-path.patch
  This patch is not needed anymore. locales are now installed in the correct
  path out of the box now.</changelog>
<changelog author="stephan.barth@suse.com" date="1396958400">- Added "Exec" and "Categories" lines to x-blend.desktop (bnc#848910)
- Check x-blend.desktop with desktop-file-validate</changelog>
<changelog author="stephan.barth@suse.com" date="1397476800">- update to bugfix version 2.70a
- fixed some paths in the spec file to reflect version number differences</changelog>
<changelog author="stephan.barth@suse.com" date="1404302400">- Introduced hard build requirement for Python3 &gt;= 3.4, because otherwise it
  won't build anymore.
- Adjusted Python 3 path for building 13.1, which doesn't build anymore anyway
- Fixed some minor spec file entries, because version string in the tarball
  changed again
- update to version 2.71 from 2.70a
  Most important changes from upstream (see full list under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.71)
  - Animation
    More easing equations added to the IPO editor for better animation
    control, locking time to other windows is again possible, auto snapping is
    now independent from display type.
    The user interface now offers more feedback, especially on errors, updates
    driver expressions automatically on editing, includes more icons and
    offers more editing tools.
    New tools also include lasso selection support, non-linked duplication for
    strips, and setting preview range based on selected strips.
  - Modelling
    The new per-face normals feature allows blender to display and export
    sharp edges correctly without geometry duplication.
    In addition, selection tools offer more options.
  - Sculpting/Painting
    New features include a HSL color wheel for color selection and tools to
    handle homogenous density in dynamic topology sculpting.
    Dyntopo and matcap display for sculpt mode have also had performance
    optimizations.
  - Game Engine
    UI to deactivate logic bricks, multi-threaded animations, shadows-only
    materials and more action layers are among the new features for the game
    engine
  - Freestyle NPR Rendering
    Freestyle has been upgraded with textured stroke support. Textured stroke
    support makes it possible to apply patterns to the lines and simulate
    rough surfaces or different kinds of brush tips for the strokes
    themselves.
    Line sorting also gives artists more control over the order of line
    drawing
  - User Interface
    Interface features include new icons for texture painting, resizeable
    preview widgets and draggable popups.
  - More Features
    More control for curve bevelling, explicit shadow cast control for blender
    internal materials, new distortion model for motion tracking and better
    handles for mask editors.</changelog>
<changelog author="stephan.barth@suse.com" date="1412596800">- update to version 2.71 to 2.72
  Changes from upstream (see full list with screenshots under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72)
  - Cycles Rendering
    Volume rendering and Subsurface Scattering can be rendered with GPUs.
    Volume and Glossy sampling is improved.
    New Ashikhmin-Shirley distribution enhances Glossy and Anisotropic BSDFs.
    Memory usage during rendering is improved.
    OSL rendering is faster.
    Anamorphic Bokeh support added.
    Caustics are under better control.
  - User Interface
    The long awaited pie menus are available as an addon for ⇆ Tab, Z, Q, ⇆
    Tab⇧ ShiftCtrl, ., CtrlSpace operators.
    New Tooltip design makes important information more noticeable.
    Python text is displayed in a monospaced font.
    Blender Internal preview now behaves like the Cycles preview; it starts
    rendering at low resolution and improves from there.
    Units parsing has been improved, even though developers claim Blender does
    not feature a units engine, it does a better job now.
  - Modeling
    A new Intersection Tool was added to quickly cut up geometry. It's a bit
    like Boolean Tool, but, does not calculate interior/exterior.
    The Bevel Tool and the Bevel Modifier now have the option to set the
    material of the newly created faces to the material in a given slot.
  - Sculpting/Painting
    Texture painting workflow has been streamlined with easy access to painted
    images and UV layers.
    The ability to generate strokes with curves and lines has been added.
    More blend modes are available and new tools to fill and mask have been
    added.
  - Compositing
    A new Sun Beams node has been added to the compositor.
  - Game Development
    A new Mouse Actuator that can achieve a mouse look effect (among other
    things), has been added.
    The Property Sensor has new evaluation types.
    The TrackTo Actuator has new menus to select up/track axis.
    The Property Actuator has a new level mode.
    The Mouse-Over-Any Sensor has new X-Ray and Property/Material detection
    options.
    A new BGE Debug and Contraints Wrapper API have been added.
  - Freestyle NPR Rendering
    The Freestyle line rendering engine has been integrated into Cycles in
    addition to the Blender Internal (BI). Freestyle provides Cycles users
    with a versatile non-photorealistic (NPR) line rendering solution. Most
    Freestyle options work in the same way for both Cycles and BI. Line
    textures in Freestyle for Cycles are defined by means of shader nodes
    (unlike Freestyle for BI, which relies on the conventional texture mapping
    and influence panels). New per-material Freestyle line settings provide a
    reliable mean to specify line colors applicable to both Cycles and the
    BI. The Freestyle Python API also has user-visible updates for better code
    readability and run-time performance.
  - Animation
    More Features
    Color ramps now support color interpolation in hue mode both clock-wise
    and counter-clock-wise.
    CtrlF in Animation Editors, is a convenience shortcut to activate Filter
    by Name functionality.
    Weights now draw in wireframe mode in the 3D view.
    Temporary data gets deleted when closing Blender.
    The Video Editor has a new Gaussian blur filter.
    New camera presets: Blackmagic Pocket Cinema and Blackmagic Production
    4K.
  - Addons
    FBX improvements: Import now supports armatures, shapekeys, animations,
    with shapekeys also being supported for export.
    New DXF importer supports 3D(SubD) geometry, and geo-referencing. It
    imports curves as curve obkects and adds control over various geometry merge
    options.
    New UV addon for align distribution and copy/paste (!!) of UVs.
    New Game Publishing Addon is available for game developers!
    New addon for named layers &amp; grouped layer management.</changelog>
<changelog author="stephan.barth@suse.com" date="1415880000">- Update to version 2.72b, which is like 2.72a a bugfix release
  A list of fixes can be found here:
  2.72a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72a:_Bug_Fixes
  2.72b:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72b:_Bug_Fixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416312000">- fix bashisms in post scripts</changelog>
<changelog author="dimstar@opensuse.org" date="1419249600">- Add blender-freetype-2.5.4.patch: Silence warnings when building
  against freetype 2.5.4 (which has a structure change on FT_Bitmap).</changelog>
<changelog author="stephan.barth@suse.com" date="1424001600">- Removed blender-freetype-2.5.4.patch
- update to version 2.73a
  Important upstream changes for 2.73a:
  * Fix invalid memory access in gradient brushes - could cause a crash
    in. (ae18fd5)
  * Fix crash in texture paint sampling when sampling materials
    without. (def2ef8)
  * Fix for GTest. (73955e2)
  * Fix texture sampling with generative modifiers - sample
    backbuffer. (b996871)
  * Fix for regression in bmesh connect-pair. (dec523d)
  * Fix T43204: Shrinkwrap constraint, project mode: Space ignored in bone
    case. (599c8a2)
  * Fix T43208 material flickering in edit mode. (1864253)
  * Fix BMesh regression: behavior for select more/less. (dcd662c)
  * Fix T43229: Knife-project regression (broke knife-project). (b77dd13)
  * Fix T43156: Cycles incorrect final render, proper viewport with moblur
    disabled. (3f0113b)
  * SDL wrangler: Support loading SDL2 libraries of different names. (653c6f2)
  * Sequencer: Don't crash when trying to rebuild proxy without having
    sequence edits. (1994e84)
  * Fix T43301: Three of the 'mirror keyframes' tools were mirroring along
    wrong axis. (6e97db7)
  * Fix own error in freestyle api. (704494e)
  * Bugfix T43293: Crash when editing shared GPencil datablock in
    VSE. (32ffc63)
  * Fix for security issue loading blend's. (45dfb3b)
  * Fix T43311: using displacement shader crashes blender. (7fd4c44)
  * Fix error in freestyle api. (967f93d)
- removed blender-freetype-2.5.4.patch, which is not necessary anymore
- create %{_mandir}/man1 if it doesn't exist
- Update to version 2.73
  List of important new features from upstream:
  * User Interface
    + A new fullscreen mode without any buttons or other "annoying" elements
    to improve the UI
    + The 3D View got an option to display the world background right from
    the viewport
    + Pie Menus:
  - Confirm Threshold to confirm a pie menu without releasing the
    original key
  - Nested Pie Menus (a Pie Menu within a Pie Menu) are now supported
    + Chinese and Japanese complex character input
  * Modeling
    + Knife-tool:
  - Cuts can now be created using free-hand drawing
  - Cut-loops can now be closed by double click
    + Selection:
  - A new selection method "Select Similar Regions" was added
  - You can now skip adjacent faces while using the select more/less
    function
  * Sculpting/Painting
    + Texture Painting:
  - The Add Simple Uvs operator for texture painting now uses a simpler
    unwrap method for better quick UV layouts
  - Face-mask edges are now hidden to give proper visual feedback while
    working with masks
    + Brushes:
  - Changing brush size, detail size and strength can now be done using
    numeric keyboard input
  - Brush strength can now also be changed for Grab and Snake Hook
    brushes
  * Sequencer
    + A Backdrop similar to Compositor is now implemented for the Sequencer
    as well
    + Strips:
  - Strips can now be snapped to other strip's start- and endpoints
  - A new slip Tool allows moving content within the strip itself
  * Freestyle NPR Rendering
    + Freestyle got a new SVG exporter, implemented as an add-on
    + View maps can now be cached
    + More options for chain selection and chain sorting were added
  * Animation
    + Grease Pencil (which got a major upgrade):
  - It is now possible to edit and animate strokes (!!!)
  - New draw styles were added, e.g. filled stroke interiors, volumetric
    strokes, ...
  - The Grease Pencil's user interface (which is now completely defined
    via Python) has gotten a general overhaul
  - Two quick access pie menus were added
    + Graph Editor:
  - Revised the set of operators for showing/hiding curves from the
    keyframe area
  - Circle selection for Curves was added
  * Add-ons
    + Collada Importer:
  - Importing rigs previously caused problems with leaf bones (end bone
    of a bone chain) so a fix was created for that.
  - Added an experimental bonechain Finder to predict the longest
    possible chains of connected bones.
    + The FBX Add-on now uses some advanced handling/tweaking options for
    importing and exporting armatures
    + The Copy and Paste Add-on is now using version 2.0
  See full list of 2.73 features here:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73
  All 2.73 and 2.73a bug fixes:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73/Bug_Fixes</changelog>
<changelog author="khyota@redhyena.net" date="1424692800">- Use SDL explicitly</changelog>
<changelog author="davejplater@gmail.com" date="1425384000">- Enable build with cycles - see bnc#905649</changelog>
<changelog author="stephan.barth@suse.com" date="1432036800">- Update to version 2.74
  Short list of upstream changes:
  - Cycles got several precision, noise, speed, memory improvements, new
    Pointiness attribute.
  - Viewport has new cool compositing features, outliner now manages orphan
    datablocks better.
  - Modeling now allows custom normals, and transferring data layers between
    meshes!
  - Massive improvements to hair dynamics and editing tools: a big step forward
    with more to come...
  - A new tool “Cavity Mask” was added to  sculpting/painting, along with other
    improvements.
  - Great memory consumption optimization in Freestyle NPR stroke rendering.
  - Grease pencil and Game engine improvements, and more...
  See a full list of changes under:
  http://www.blender.org/features/2-74/</changelog>
<changelog author="stephan.barth@suse.com" date="1437307200">- Some spec file clean-up. graphviz and liblcms-devel were listed twice
- Make "-DWITH_OPENCOLLADA:BOOL=on" conditional, by using the value from
  "%define collada". Only use it when not installing openSUSE openCOLLADA. At
  the moment the upstream version doesn't work.
- Update to version 2.75a
  Short list of upstream changes for 2.75
  - Blender now supports a fully integrated Multi-View and Stereo 3D pipeline
  - Cycles has much awaited initial support for AMD GPUs, and a new Light
    Portals feature.
  - UI now allows font previews in the file browser.
  - High quality options for viewport depth of field were added
  - Modeling has a new Corrective Smooth modifier.
  - The Decimate modifier was improved significantly.
  - 3D viewport painting now supports symmetry and the distribution of Dynamic
    Topology was improved
  - Video Sequence Editor: Placeholders can now replace missing frames of
    image sequences
  - Game Engine now allows smoother LOD transitions, and supports mist
    attributes animation
  - And: 100s of bug fixes and smaller feature improvements.
  The full list of features for 2.75:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75
  A list of all bugfixes for 2.75 and 2.75a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75/Bug_Fixes</changelog>
<changelog author="davejplater@gmail.com" date="1438689600">- Enabled collada again after updating openCOLLADA to latest
  Fedora build.</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1445947200">- disable WITH_CYCLES for non intel architectures to avoid
  build failure of cycles/bvh with missing x86intrin.h
  (not sure this is the best bypass)
  Add _constraints file to avoid no space error on ppc64le
- avoid -msse* for non intel architecture</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446724800">- modify _constraints to have default disk size for all arch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446811200">- modify _constraints to add physicalmemory to 3GB</changelog>

</package>
<package pkgid="c8cf580771793c433b78aaaf7e1864e7ce3efcdf99d62419446b45fe310b856f" name="blender" arch="x86_64">
    <version epoch="0" ver="2.75a" rel="4.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1382356800">- Disable sse2 instructions on non x86_64 arches, bnc#846545</changelog>
<changelog author="badshah400@gmail.com" date="1384689600">- Update to version 2.69 (for the full list see
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.69):
  + Modeling:
  - A new hidden wire display option was added to help with
    retopology
  - Mesh Bisect is a new tool to cut meshes in half
  - The Bridge, Edgenet fill, Grid fill and Symmetrize tools
    were improved
  - New curve and lattice editing tools were added too
  + Cycles Rendering:
  - Hair rendering was improved with a new Hair shader and
    reorganized settings
  - Subsurface scattering uses a new sampling algorithm and now
    supports bump mapping and texture blurring
  - Sky rendering now uses a more accurate sky model
  - New blackbody, vector transform and HSV nodes were added
  - The non-progressive integrator was renamed to Branched Path
    Integrator, and is now available for GPU rendering
  + Motion tracker now supports plane tracking, which can be used
    to replace billboards, screens and other flat things in
    footage
  + Lists in the user interface can now be resized, sorted and
    filtered
  + Small improvements for vertex parenting, empty objects, the
    shrinkwrap modifier, mask editing, armatures, f-curves and
    drivers
  + Addons:
  - FBX Import support has been added
  - FBX/OBJ can now export split normals (without the need for
    the edge split modifier)
  + Fixes for over 270 bugs.</changelog>
<changelog author="coolo@suse.de" date="1388577600">- add constraints file to avoid building on low memory (needed for
  x86_64, but it can't be limited to that arch)</changelog>
<changelog author="stephan.barth@suse.com" date="1396440000">- update to version 2.70
  Upstream changes:
  + Volumetric rendering support has been added to Cycles
  + motion tracking now supports weighted tracks
  + many user interface improvements have been made
  + New threaded dependency graph evaluation has been added
  + a laplacian deform modifier and a wireframe modifier have been added as
    well
  + many improvements to the existing toolset
  + over 560 bugfixes
- Fixed building for Python 3.4
- Delete .gitignore file
- Extended fdupes call to remove locale duplicates
- Rewrote file liste to avoid duplicate files in main and lang package. Also
  explicitly name directories.
- removed blender-2.64a-fix-locale-files-path.patch
  This patch is not needed anymore. locales are now installed in the correct
  path out of the box now.</changelog>
<changelog author="stephan.barth@suse.com" date="1396958400">- Added "Exec" and "Categories" lines to x-blend.desktop (bnc#848910)
- Check x-blend.desktop with desktop-file-validate</changelog>
<changelog author="stephan.barth@suse.com" date="1397476800">- update to bugfix version 2.70a
- fixed some paths in the spec file to reflect version number differences</changelog>
<changelog author="stephan.barth@suse.com" date="1404302400">- Introduced hard build requirement for Python3 &gt;= 3.4, because otherwise it
  won't build anymore.
- Adjusted Python 3 path for building 13.1, which doesn't build anymore anyway
- Fixed some minor spec file entries, because version string in the tarball
  changed again
- update to version 2.71 from 2.70a
  Most important changes from upstream (see full list under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.71)
  - Animation
    More easing equations added to the IPO editor for better animation
    control, locking time to other windows is again possible, auto snapping is
    now independent from display type.
    The user interface now offers more feedback, especially on errors, updates
    driver expressions automatically on editing, includes more icons and
    offers more editing tools.
    New tools also include lasso selection support, non-linked duplication for
    strips, and setting preview range based on selected strips.
  - Modelling
    The new per-face normals feature allows blender to display and export
    sharp edges correctly without geometry duplication.
    In addition, selection tools offer more options.
  - Sculpting/Painting
    New features include a HSL color wheel for color selection and tools to
    handle homogenous density in dynamic topology sculpting.
    Dyntopo and matcap display for sculpt mode have also had performance
    optimizations.
  - Game Engine
    UI to deactivate logic bricks, multi-threaded animations, shadows-only
    materials and more action layers are among the new features for the game
    engine
  - Freestyle NPR Rendering
    Freestyle has been upgraded with textured stroke support. Textured stroke
    support makes it possible to apply patterns to the lines and simulate
    rough surfaces or different kinds of brush tips for the strokes
    themselves.
    Line sorting also gives artists more control over the order of line
    drawing
  - User Interface
    Interface features include new icons for texture painting, resizeable
    preview widgets and draggable popups.
  - More Features
    More control for curve bevelling, explicit shadow cast control for blender
    internal materials, new distortion model for motion tracking and better
    handles for mask editors.</changelog>
<changelog author="stephan.barth@suse.com" date="1412596800">- update to version 2.71 to 2.72
  Changes from upstream (see full list with screenshots under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72)
  - Cycles Rendering
    Volume rendering and Subsurface Scattering can be rendered with GPUs.
    Volume and Glossy sampling is improved.
    New Ashikhmin-Shirley distribution enhances Glossy and Anisotropic BSDFs.
    Memory usage during rendering is improved.
    OSL rendering is faster.
    Anamorphic Bokeh support added.
    Caustics are under better control.
  - User Interface
    The long awaited pie menus are available as an addon for ⇆ Tab, Z, Q, ⇆
    Tab⇧ ShiftCtrl, ., CtrlSpace operators.
    New Tooltip design makes important information more noticeable.
    Python text is displayed in a monospaced font.
    Blender Internal preview now behaves like the Cycles preview; it starts
    rendering at low resolution and improves from there.
    Units parsing has been improved, even though developers claim Blender does
    not feature a units engine, it does a better job now.
  - Modeling
    A new Intersection Tool was added to quickly cut up geometry. It's a bit
    like Boolean Tool, but, does not calculate interior/exterior.
    The Bevel Tool and the Bevel Modifier now have the option to set the
    material of the newly created faces to the material in a given slot.
  - Sculpting/Painting
    Texture painting workflow has been streamlined with easy access to painted
    images and UV layers.
    The ability to generate strokes with curves and lines has been added.
    More blend modes are available and new tools to fill and mask have been
    added.
  - Compositing
    A new Sun Beams node has been added to the compositor.
  - Game Development
    A new Mouse Actuator that can achieve a mouse look effect (among other
    things), has been added.
    The Property Sensor has new evaluation types.
    The TrackTo Actuator has new menus to select up/track axis.
    The Property Actuator has a new level mode.
    The Mouse-Over-Any Sensor has new X-Ray and Property/Material detection
    options.
    A new BGE Debug and Contraints Wrapper API have been added.
  - Freestyle NPR Rendering
    The Freestyle line rendering engine has been integrated into Cycles in
    addition to the Blender Internal (BI). Freestyle provides Cycles users
    with a versatile non-photorealistic (NPR) line rendering solution. Most
    Freestyle options work in the same way for both Cycles and BI. Line
    textures in Freestyle for Cycles are defined by means of shader nodes
    (unlike Freestyle for BI, which relies on the conventional texture mapping
    and influence panels). New per-material Freestyle line settings provide a
    reliable mean to specify line colors applicable to both Cycles and the
    BI. The Freestyle Python API also has user-visible updates for better code
    readability and run-time performance.
  - Animation
    More Features
    Color ramps now support color interpolation in hue mode both clock-wise
    and counter-clock-wise.
    CtrlF in Animation Editors, is a convenience shortcut to activate Filter
    by Name functionality.
    Weights now draw in wireframe mode in the 3D view.
    Temporary data gets deleted when closing Blender.
    The Video Editor has a new Gaussian blur filter.
    New camera presets: Blackmagic Pocket Cinema and Blackmagic Production
    4K.
  - Addons
    FBX improvements: Import now supports armatures, shapekeys, animations,
    with shapekeys also being supported for export.
    New DXF importer supports 3D(SubD) geometry, and geo-referencing. It
    imports curves as curve obkects and adds control over various geometry merge
    options.
    New UV addon for align distribution and copy/paste (!!) of UVs.
    New Game Publishing Addon is available for game developers!
    New addon for named layers &amp; grouped layer management.</changelog>
<changelog author="stephan.barth@suse.com" date="1415880000">- Update to version 2.72b, which is like 2.72a a bugfix release
  A list of fixes can be found here:
  2.72a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72a:_Bug_Fixes
  2.72b:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72b:_Bug_Fixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416312000">- fix bashisms in post scripts</changelog>
<changelog author="dimstar@opensuse.org" date="1419249600">- Add blender-freetype-2.5.4.patch: Silence warnings when building
  against freetype 2.5.4 (which has a structure change on FT_Bitmap).</changelog>
<changelog author="stephan.barth@suse.com" date="1424001600">- Removed blender-freetype-2.5.4.patch
- update to version 2.73a
  Important upstream changes for 2.73a:
  * Fix invalid memory access in gradient brushes - could cause a crash
    in. (ae18fd5)
  * Fix crash in texture paint sampling when sampling materials
    without. (def2ef8)
  * Fix for GTest. (73955e2)
  * Fix texture sampling with generative modifiers - sample
    backbuffer. (b996871)
  * Fix for regression in bmesh connect-pair. (dec523d)
  * Fix T43204: Shrinkwrap constraint, project mode: Space ignored in bone
    case. (599c8a2)
  * Fix T43208 material flickering in edit mode. (1864253)
  * Fix BMesh regression: behavior for select more/less. (dcd662c)
  * Fix T43229: Knife-project regression (broke knife-project). (b77dd13)
  * Fix T43156: Cycles incorrect final render, proper viewport with moblur
    disabled. (3f0113b)
  * SDL wrangler: Support loading SDL2 libraries of different names. (653c6f2)
  * Sequencer: Don't crash when trying to rebuild proxy without having
    sequence edits. (1994e84)
  * Fix T43301: Three of the 'mirror keyframes' tools were mirroring along
    wrong axis. (6e97db7)
  * Fix own error in freestyle api. (704494e)
  * Bugfix T43293: Crash when editing shared GPencil datablock in
    VSE. (32ffc63)
  * Fix for security issue loading blend's. (45dfb3b)
  * Fix T43311: using displacement shader crashes blender. (7fd4c44)
  * Fix error in freestyle api. (967f93d)
- removed blender-freetype-2.5.4.patch, which is not necessary anymore
- create %{_mandir}/man1 if it doesn't exist
- Update to version 2.73
  List of important new features from upstream:
  * User Interface
    + A new fullscreen mode without any buttons or other "annoying" elements
    to improve the UI
    + The 3D View got an option to display the world background right from
    the viewport
    + Pie Menus:
  - Confirm Threshold to confirm a pie menu without releasing the
    original key
  - Nested Pie Menus (a Pie Menu within a Pie Menu) are now supported
    + Chinese and Japanese complex character input
  * Modeling
    + Knife-tool:
  - Cuts can now be created using free-hand drawing
  - Cut-loops can now be closed by double click
    + Selection:
  - A new selection method "Select Similar Regions" was added
  - You can now skip adjacent faces while using the select more/less
    function
  * Sculpting/Painting
    + Texture Painting:
  - The Add Simple Uvs operator for texture painting now uses a simpler
    unwrap method for better quick UV layouts
  - Face-mask edges are now hidden to give proper visual feedback while
    working with masks
    + Brushes:
  - Changing brush size, detail size and strength can now be done using
    numeric keyboard input
  - Brush strength can now also be changed for Grab and Snake Hook
    brushes
  * Sequencer
    + A Backdrop similar to Compositor is now implemented for the Sequencer
    as well
    + Strips:
  - Strips can now be snapped to other strip's start- and endpoints
  - A new slip Tool allows moving content within the strip itself
  * Freestyle NPR Rendering
    + Freestyle got a new SVG exporter, implemented as an add-on
    + View maps can now be cached
    + More options for chain selection and chain sorting were added
  * Animation
    + Grease Pencil (which got a major upgrade):
  - It is now possible to edit and animate strokes (!!!)
  - New draw styles were added, e.g. filled stroke interiors, volumetric
    strokes, ...
  - The Grease Pencil's user interface (which is now completely defined
    via Python) has gotten a general overhaul
  - Two quick access pie menus were added
    + Graph Editor:
  - Revised the set of operators for showing/hiding curves from the
    keyframe area
  - Circle selection for Curves was added
  * Add-ons
    + Collada Importer:
  - Importing rigs previously caused problems with leaf bones (end bone
    of a bone chain) so a fix was created for that.
  - Added an experimental bonechain Finder to predict the longest
    possible chains of connected bones.
    + The FBX Add-on now uses some advanced handling/tweaking options for
    importing and exporting armatures
    + The Copy and Paste Add-on is now using version 2.0
  See full list of 2.73 features here:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73
  All 2.73 and 2.73a bug fixes:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73/Bug_Fixes</changelog>
<changelog author="khyota@redhyena.net" date="1424692800">- Use SDL explicitly</changelog>
<changelog author="davejplater@gmail.com" date="1425384000">- Enable build with cycles - see bnc#905649</changelog>
<changelog author="stephan.barth@suse.com" date="1432036800">- Update to version 2.74
  Short list of upstream changes:
  - Cycles got several precision, noise, speed, memory improvements, new
    Pointiness attribute.
  - Viewport has new cool compositing features, outliner now manages orphan
    datablocks better.
  - Modeling now allows custom normals, and transferring data layers between
    meshes!
  - Massive improvements to hair dynamics and editing tools: a big step forward
    with more to come...
  - A new tool “Cavity Mask” was added to  sculpting/painting, along with other
    improvements.
  - Great memory consumption optimization in Freestyle NPR stroke rendering.
  - Grease pencil and Game engine improvements, and more...
  See a full list of changes under:
  http://www.blender.org/features/2-74/</changelog>
<changelog author="stephan.barth@suse.com" date="1437307200">- Some spec file clean-up. graphviz and liblcms-devel were listed twice
- Make "-DWITH_OPENCOLLADA:BOOL=on" conditional, by using the value from
  "%define collada". Only use it when not installing openSUSE openCOLLADA. At
  the moment the upstream version doesn't work.
- Update to version 2.75a
  Short list of upstream changes for 2.75
  - Blender now supports a fully integrated Multi-View and Stereo 3D pipeline
  - Cycles has much awaited initial support for AMD GPUs, and a new Light
    Portals feature.
  - UI now allows font previews in the file browser.
  - High quality options for viewport depth of field were added
  - Modeling has a new Corrective Smooth modifier.
  - The Decimate modifier was improved significantly.
  - 3D viewport painting now supports symmetry and the distribution of Dynamic
    Topology was improved
  - Video Sequence Editor: Placeholders can now replace missing frames of
    image sequences
  - Game Engine now allows smoother LOD transitions, and supports mist
    attributes animation
  - And: 100s of bug fixes and smaller feature improvements.
  The full list of features for 2.75:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75
  A list of all bugfixes for 2.75 and 2.75a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75/Bug_Fixes</changelog>
<changelog author="davejplater@gmail.com" date="1438689600">- Enabled collada again after updating openCOLLADA to latest
  Fedora build.</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1445947200">- disable WITH_CYCLES for non intel architectures to avoid
  build failure of cycles/bvh with missing x86intrin.h
  (not sure this is the best bypass)
  Add _constraints file to avoid no space error on ppc64le
- avoid -msse* for non intel architecture</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446724800">- modify _constraints to have default disk size for all arch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446811200">- modify _constraints to add physicalmemory to 3GB</changelog>

</package>
<package pkgid="27dac2909b2fcf853daa2902f7ec11cb025512731804250d5df76e875de802bd" name="blender-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.75a" rel="4.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1382356800">- Disable sse2 instructions on non x86_64 arches, bnc#846545</changelog>
<changelog author="badshah400@gmail.com" date="1384689600">- Update to version 2.69 (for the full list see
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.69):
  + Modeling:
  - A new hidden wire display option was added to help with
    retopology
  - Mesh Bisect is a new tool to cut meshes in half
  - The Bridge, Edgenet fill, Grid fill and Symmetrize tools
    were improved
  - New curve and lattice editing tools were added too
  + Cycles Rendering:
  - Hair rendering was improved with a new Hair shader and
    reorganized settings
  - Subsurface scattering uses a new sampling algorithm and now
    supports bump mapping and texture blurring
  - Sky rendering now uses a more accurate sky model
  - New blackbody, vector transform and HSV nodes were added
  - The non-progressive integrator was renamed to Branched Path
    Integrator, and is now available for GPU rendering
  + Motion tracker now supports plane tracking, which can be used
    to replace billboards, screens and other flat things in
    footage
  + Lists in the user interface can now be resized, sorted and
    filtered
  + Small improvements for vertex parenting, empty objects, the
    shrinkwrap modifier, mask editing, armatures, f-curves and
    drivers
  + Addons:
  - FBX Import support has been added
  - FBX/OBJ can now export split normals (without the need for
    the edge split modifier)
  + Fixes for over 270 bugs.</changelog>
<changelog author="coolo@suse.de" date="1388577600">- add constraints file to avoid building on low memory (needed for
  x86_64, but it can't be limited to that arch)</changelog>
<changelog author="stephan.barth@suse.com" date="1396440000">- update to version 2.70
  Upstream changes:
  + Volumetric rendering support has been added to Cycles
  + motion tracking now supports weighted tracks
  + many user interface improvements have been made
  + New threaded dependency graph evaluation has been added
  + a laplacian deform modifier and a wireframe modifier have been added as
    well
  + many improvements to the existing toolset
  + over 560 bugfixes
- Fixed building for Python 3.4
- Delete .gitignore file
- Extended fdupes call to remove locale duplicates
- Rewrote file liste to avoid duplicate files in main and lang package. Also
  explicitly name directories.
- removed blender-2.64a-fix-locale-files-path.patch
  This patch is not needed anymore. locales are now installed in the correct
  path out of the box now.</changelog>
<changelog author="stephan.barth@suse.com" date="1396958400">- Added "Exec" and "Categories" lines to x-blend.desktop (bnc#848910)
- Check x-blend.desktop with desktop-file-validate</changelog>
<changelog author="stephan.barth@suse.com" date="1397476800">- update to bugfix version 2.70a
- fixed some paths in the spec file to reflect version number differences</changelog>
<changelog author="stephan.barth@suse.com" date="1404302400">- Introduced hard build requirement for Python3 &gt;= 3.4, because otherwise it
  won't build anymore.
- Adjusted Python 3 path for building 13.1, which doesn't build anymore anyway
- Fixed some minor spec file entries, because version string in the tarball
  changed again
- update to version 2.71 from 2.70a
  Most important changes from upstream (see full list under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.71)
  - Animation
    More easing equations added to the IPO editor for better animation
    control, locking time to other windows is again possible, auto snapping is
    now independent from display type.
    The user interface now offers more feedback, especially on errors, updates
    driver expressions automatically on editing, includes more icons and
    offers more editing tools.
    New tools also include lasso selection support, non-linked duplication for
    strips, and setting preview range based on selected strips.
  - Modelling
    The new per-face normals feature allows blender to display and export
    sharp edges correctly without geometry duplication.
    In addition, selection tools offer more options.
  - Sculpting/Painting
    New features include a HSL color wheel for color selection and tools to
    handle homogenous density in dynamic topology sculpting.
    Dyntopo and matcap display for sculpt mode have also had performance
    optimizations.
  - Game Engine
    UI to deactivate logic bricks, multi-threaded animations, shadows-only
    materials and more action layers are among the new features for the game
    engine
  - Freestyle NPR Rendering
    Freestyle has been upgraded with textured stroke support. Textured stroke
    support makes it possible to apply patterns to the lines and simulate
    rough surfaces or different kinds of brush tips for the strokes
    themselves.
    Line sorting also gives artists more control over the order of line
    drawing
  - User Interface
    Interface features include new icons for texture painting, resizeable
    preview widgets and draggable popups.
  - More Features
    More control for curve bevelling, explicit shadow cast control for blender
    internal materials, new distortion model for motion tracking and better
    handles for mask editors.</changelog>
<changelog author="stephan.barth@suse.com" date="1412596800">- update to version 2.71 to 2.72
  Changes from upstream (see full list with screenshots under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72)
  - Cycles Rendering
    Volume rendering and Subsurface Scattering can be rendered with GPUs.
    Volume and Glossy sampling is improved.
    New Ashikhmin-Shirley distribution enhances Glossy and Anisotropic BSDFs.
    Memory usage during rendering is improved.
    OSL rendering is faster.
    Anamorphic Bokeh support added.
    Caustics are under better control.
  - User Interface
    The long awaited pie menus are available as an addon for ⇆ Tab, Z, Q, ⇆
    Tab⇧ ShiftCtrl, ., CtrlSpace operators.
    New Tooltip design makes important information more noticeable.
    Python text is displayed in a monospaced font.
    Blender Internal preview now behaves like the Cycles preview; it starts
    rendering at low resolution and improves from there.
    Units parsing has been improved, even though developers claim Blender does
    not feature a units engine, it does a better job now.
  - Modeling
    A new Intersection Tool was added to quickly cut up geometry. It's a bit
    like Boolean Tool, but, does not calculate interior/exterior.
    The Bevel Tool and the Bevel Modifier now have the option to set the
    material of the newly created faces to the material in a given slot.
  - Sculpting/Painting
    Texture painting workflow has been streamlined with easy access to painted
    images and UV layers.
    The ability to generate strokes with curves and lines has been added.
    More blend modes are available and new tools to fill and mask have been
    added.
  - Compositing
    A new Sun Beams node has been added to the compositor.
  - Game Development
    A new Mouse Actuator that can achieve a mouse look effect (among other
    things), has been added.
    The Property Sensor has new evaluation types.
    The TrackTo Actuator has new menus to select up/track axis.
    The Property Actuator has a new level mode.
    The Mouse-Over-Any Sensor has new X-Ray and Property/Material detection
    options.
    A new BGE Debug and Contraints Wrapper API have been added.
  - Freestyle NPR Rendering
    The Freestyle line rendering engine has been integrated into Cycles in
    addition to the Blender Internal (BI). Freestyle provides Cycles users
    with a versatile non-photorealistic (NPR) line rendering solution. Most
    Freestyle options work in the same way for both Cycles and BI. Line
    textures in Freestyle for Cycles are defined by means of shader nodes
    (unlike Freestyle for BI, which relies on the conventional texture mapping
    and influence panels). New per-material Freestyle line settings provide a
    reliable mean to specify line colors applicable to both Cycles and the
    BI. The Freestyle Python API also has user-visible updates for better code
    readability and run-time performance.
  - Animation
    More Features
    Color ramps now support color interpolation in hue mode both clock-wise
    and counter-clock-wise.
    CtrlF in Animation Editors, is a convenience shortcut to activate Filter
    by Name functionality.
    Weights now draw in wireframe mode in the 3D view.
    Temporary data gets deleted when closing Blender.
    The Video Editor has a new Gaussian blur filter.
    New camera presets: Blackmagic Pocket Cinema and Blackmagic Production
    4K.
  - Addons
    FBX improvements: Import now supports armatures, shapekeys, animations,
    with shapekeys also being supported for export.
    New DXF importer supports 3D(SubD) geometry, and geo-referencing. It
    imports curves as curve obkects and adds control over various geometry merge
    options.
    New UV addon for align distribution and copy/paste (!!) of UVs.
    New Game Publishing Addon is available for game developers!
    New addon for named layers &amp; grouped layer management.</changelog>
<changelog author="stephan.barth@suse.com" date="1415880000">- Update to version 2.72b, which is like 2.72a a bugfix release
  A list of fixes can be found here:
  2.72a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72a:_Bug_Fixes
  2.72b:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72b:_Bug_Fixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416312000">- fix bashisms in post scripts</changelog>
<changelog author="dimstar@opensuse.org" date="1419249600">- Add blender-freetype-2.5.4.patch: Silence warnings when building
  against freetype 2.5.4 (which has a structure change on FT_Bitmap).</changelog>
<changelog author="stephan.barth@suse.com" date="1424001600">- Removed blender-freetype-2.5.4.patch
- update to version 2.73a
  Important upstream changes for 2.73a:
  * Fix invalid memory access in gradient brushes - could cause a crash
    in. (ae18fd5)
  * Fix crash in texture paint sampling when sampling materials
    without. (def2ef8)
  * Fix for GTest. (73955e2)
  * Fix texture sampling with generative modifiers - sample
    backbuffer. (b996871)
  * Fix for regression in bmesh connect-pair. (dec523d)
  * Fix T43204: Shrinkwrap constraint, project mode: Space ignored in bone
    case. (599c8a2)
  * Fix T43208 material flickering in edit mode. (1864253)
  * Fix BMesh regression: behavior for select more/less. (dcd662c)
  * Fix T43229: Knife-project regression (broke knife-project). (b77dd13)
  * Fix T43156: Cycles incorrect final render, proper viewport with moblur
    disabled. (3f0113b)
  * SDL wrangler: Support loading SDL2 libraries of different names. (653c6f2)
  * Sequencer: Don't crash when trying to rebuild proxy without having
    sequence edits. (1994e84)
  * Fix T43301: Three of the 'mirror keyframes' tools were mirroring along
    wrong axis. (6e97db7)
  * Fix own error in freestyle api. (704494e)
  * Bugfix T43293: Crash when editing shared GPencil datablock in
    VSE. (32ffc63)
  * Fix for security issue loading blend's. (45dfb3b)
  * Fix T43311: using displacement shader crashes blender. (7fd4c44)
  * Fix error in freestyle api. (967f93d)
- removed blender-freetype-2.5.4.patch, which is not necessary anymore
- create %{_mandir}/man1 if it doesn't exist
- Update to version 2.73
  List of important new features from upstream:
  * User Interface
    + A new fullscreen mode without any buttons or other "annoying" elements
    to improve the UI
    + The 3D View got an option to display the world background right from
    the viewport
    + Pie Menus:
  - Confirm Threshold to confirm a pie menu without releasing the
    original key
  - Nested Pie Menus (a Pie Menu within a Pie Menu) are now supported
    + Chinese and Japanese complex character input
  * Modeling
    + Knife-tool:
  - Cuts can now be created using free-hand drawing
  - Cut-loops can now be closed by double click
    + Selection:
  - A new selection method "Select Similar Regions" was added
  - You can now skip adjacent faces while using the select more/less
    function
  * Sculpting/Painting
    + Texture Painting:
  - The Add Simple Uvs operator for texture painting now uses a simpler
    unwrap method for better quick UV layouts
  - Face-mask edges are now hidden to give proper visual feedback while
    working with masks
    + Brushes:
  - Changing brush size, detail size and strength can now be done using
    numeric keyboard input
  - Brush strength can now also be changed for Grab and Snake Hook
    brushes
  * Sequencer
    + A Backdrop similar to Compositor is now implemented for the Sequencer
    as well
    + Strips:
  - Strips can now be snapped to other strip's start- and endpoints
  - A new slip Tool allows moving content within the strip itself
  * Freestyle NPR Rendering
    + Freestyle got a new SVG exporter, implemented as an add-on
    + View maps can now be cached
    + More options for chain selection and chain sorting were added
  * Animation
    + Grease Pencil (which got a major upgrade):
  - It is now possible to edit and animate strokes (!!!)
  - New draw styles were added, e.g. filled stroke interiors, volumetric
    strokes, ...
  - The Grease Pencil's user interface (which is now completely defined
    via Python) has gotten a general overhaul
  - Two quick access pie menus were added
    + Graph Editor:
  - Revised the set of operators for showing/hiding curves from the
    keyframe area
  - Circle selection for Curves was added
  * Add-ons
    + Collada Importer:
  - Importing rigs previously caused problems with leaf bones (end bone
    of a bone chain) so a fix was created for that.
  - Added an experimental bonechain Finder to predict the longest
    possible chains of connected bones.
    + The FBX Add-on now uses some advanced handling/tweaking options for
    importing and exporting armatures
    + The Copy and Paste Add-on is now using version 2.0
  See full list of 2.73 features here:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73
  All 2.73 and 2.73a bug fixes:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73/Bug_Fixes</changelog>
<changelog author="khyota@redhyena.net" date="1424692800">- Use SDL explicitly</changelog>
<changelog author="davejplater@gmail.com" date="1425384000">- Enable build with cycles - see bnc#905649</changelog>
<changelog author="stephan.barth@suse.com" date="1432036800">- Update to version 2.74
  Short list of upstream changes:
  - Cycles got several precision, noise, speed, memory improvements, new
    Pointiness attribute.
  - Viewport has new cool compositing features, outliner now manages orphan
    datablocks better.
  - Modeling now allows custom normals, and transferring data layers between
    meshes!
  - Massive improvements to hair dynamics and editing tools: a big step forward
    with more to come...
  - A new tool “Cavity Mask” was added to  sculpting/painting, along with other
    improvements.
  - Great memory consumption optimization in Freestyle NPR stroke rendering.
  - Grease pencil and Game engine improvements, and more...
  See a full list of changes under:
  http://www.blender.org/features/2-74/</changelog>
<changelog author="stephan.barth@suse.com" date="1437307200">- Some spec file clean-up. graphviz and liblcms-devel were listed twice
- Make "-DWITH_OPENCOLLADA:BOOL=on" conditional, by using the value from
  "%define collada". Only use it when not installing openSUSE openCOLLADA. At
  the moment the upstream version doesn't work.
- Update to version 2.75a
  Short list of upstream changes for 2.75
  - Blender now supports a fully integrated Multi-View and Stereo 3D pipeline
  - Cycles has much awaited initial support for AMD GPUs, and a new Light
    Portals feature.
  - UI now allows font previews in the file browser.
  - High quality options for viewport depth of field were added
  - Modeling has a new Corrective Smooth modifier.
  - The Decimate modifier was improved significantly.
  - 3D viewport painting now supports symmetry and the distribution of Dynamic
    Topology was improved
  - Video Sequence Editor: Placeholders can now replace missing frames of
    image sequences
  - Game Engine now allows smoother LOD transitions, and supports mist
    attributes animation
  - And: 100s of bug fixes and smaller feature improvements.
  The full list of features for 2.75:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75
  A list of all bugfixes for 2.75 and 2.75a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75/Bug_Fixes</changelog>
<changelog author="davejplater@gmail.com" date="1438689600">- Enabled collada again after updating openCOLLADA to latest
  Fedora build.</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1445947200">- disable WITH_CYCLES for non intel architectures to avoid
  build failure of cycles/bvh with missing x86intrin.h
  (not sure this is the best bypass)
  Add _constraints file to avoid no space error on ppc64le
- avoid -msse* for non intel architecture</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446724800">- modify _constraints to have default disk size for all arch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446811200">- modify _constraints to add physicalmemory to 3GB</changelog>

</package>
<package pkgid="c44b1d5d3302657e8caec75f07fe5a487911b1dbb34468c1cd7b62100c899f7b" name="blender-debugsource" arch="x86_64">
    <version epoch="0" ver="2.75a" rel="4.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1382356800">- Disable sse2 instructions on non x86_64 arches, bnc#846545</changelog>
<changelog author="badshah400@gmail.com" date="1384689600">- Update to version 2.69 (for the full list see
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.69):
  + Modeling:
  - A new hidden wire display option was added to help with
    retopology
  - Mesh Bisect is a new tool to cut meshes in half
  - The Bridge, Edgenet fill, Grid fill and Symmetrize tools
    were improved
  - New curve and lattice editing tools were added too
  + Cycles Rendering:
  - Hair rendering was improved with a new Hair shader and
    reorganized settings
  - Subsurface scattering uses a new sampling algorithm and now
    supports bump mapping and texture blurring
  - Sky rendering now uses a more accurate sky model
  - New blackbody, vector transform and HSV nodes were added
  - The non-progressive integrator was renamed to Branched Path
    Integrator, and is now available for GPU rendering
  + Motion tracker now supports plane tracking, which can be used
    to replace billboards, screens and other flat things in
    footage
  + Lists in the user interface can now be resized, sorted and
    filtered
  + Small improvements for vertex parenting, empty objects, the
    shrinkwrap modifier, mask editing, armatures, f-curves and
    drivers
  + Addons:
  - FBX Import support has been added
  - FBX/OBJ can now export split normals (without the need for
    the edge split modifier)
  + Fixes for over 270 bugs.</changelog>
<changelog author="coolo@suse.de" date="1388577600">- add constraints file to avoid building on low memory (needed for
  x86_64, but it can't be limited to that arch)</changelog>
<changelog author="stephan.barth@suse.com" date="1396440000">- update to version 2.70
  Upstream changes:
  + Volumetric rendering support has been added to Cycles
  + motion tracking now supports weighted tracks
  + many user interface improvements have been made
  + New threaded dependency graph evaluation has been added
  + a laplacian deform modifier and a wireframe modifier have been added as
    well
  + many improvements to the existing toolset
  + over 560 bugfixes
- Fixed building for Python 3.4
- Delete .gitignore file
- Extended fdupes call to remove locale duplicates
- Rewrote file liste to avoid duplicate files in main and lang package. Also
  explicitly name directories.
- removed blender-2.64a-fix-locale-files-path.patch
  This patch is not needed anymore. locales are now installed in the correct
  path out of the box now.</changelog>
<changelog author="stephan.barth@suse.com" date="1396958400">- Added "Exec" and "Categories" lines to x-blend.desktop (bnc#848910)
- Check x-blend.desktop with desktop-file-validate</changelog>
<changelog author="stephan.barth@suse.com" date="1397476800">- update to bugfix version 2.70a
- fixed some paths in the spec file to reflect version number differences</changelog>
<changelog author="stephan.barth@suse.com" date="1404302400">- Introduced hard build requirement for Python3 &gt;= 3.4, because otherwise it
  won't build anymore.
- Adjusted Python 3 path for building 13.1, which doesn't build anymore anyway
- Fixed some minor spec file entries, because version string in the tarball
  changed again
- update to version 2.71 from 2.70a
  Most important changes from upstream (see full list under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.71)
  - Animation
    More easing equations added to the IPO editor for better animation
    control, locking time to other windows is again possible, auto snapping is
    now independent from display type.
    The user interface now offers more feedback, especially on errors, updates
    driver expressions automatically on editing, includes more icons and
    offers more editing tools.
    New tools also include lasso selection support, non-linked duplication for
    strips, and setting preview range based on selected strips.
  - Modelling
    The new per-face normals feature allows blender to display and export
    sharp edges correctly without geometry duplication.
    In addition, selection tools offer more options.
  - Sculpting/Painting
    New features include a HSL color wheel for color selection and tools to
    handle homogenous density in dynamic topology sculpting.
    Dyntopo and matcap display for sculpt mode have also had performance
    optimizations.
  - Game Engine
    UI to deactivate logic bricks, multi-threaded animations, shadows-only
    materials and more action layers are among the new features for the game
    engine
  - Freestyle NPR Rendering
    Freestyle has been upgraded with textured stroke support. Textured stroke
    support makes it possible to apply patterns to the lines and simulate
    rough surfaces or different kinds of brush tips for the strokes
    themselves.
    Line sorting also gives artists more control over the order of line
    drawing
  - User Interface
    Interface features include new icons for texture painting, resizeable
    preview widgets and draggable popups.
  - More Features
    More control for curve bevelling, explicit shadow cast control for blender
    internal materials, new distortion model for motion tracking and better
    handles for mask editors.</changelog>
<changelog author="stephan.barth@suse.com" date="1412596800">- update to version 2.71 to 2.72
  Changes from upstream (see full list with screenshots under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72)
  - Cycles Rendering
    Volume rendering and Subsurface Scattering can be rendered with GPUs.
    Volume and Glossy sampling is improved.
    New Ashikhmin-Shirley distribution enhances Glossy and Anisotropic BSDFs.
    Memory usage during rendering is improved.
    OSL rendering is faster.
    Anamorphic Bokeh support added.
    Caustics are under better control.
  - User Interface
    The long awaited pie menus are available as an addon for ⇆ Tab, Z, Q, ⇆
    Tab⇧ ShiftCtrl, ., CtrlSpace operators.
    New Tooltip design makes important information more noticeable.
    Python text is displayed in a monospaced font.
    Blender Internal preview now behaves like the Cycles preview; it starts
    rendering at low resolution and improves from there.
    Units parsing has been improved, even though developers claim Blender does
    not feature a units engine, it does a better job now.
  - Modeling
    A new Intersection Tool was added to quickly cut up geometry. It's a bit
    like Boolean Tool, but, does not calculate interior/exterior.
    The Bevel Tool and the Bevel Modifier now have the option to set the
    material of the newly created faces to the material in a given slot.
  - Sculpting/Painting
    Texture painting workflow has been streamlined with easy access to painted
    images and UV layers.
    The ability to generate strokes with curves and lines has been added.
    More blend modes are available and new tools to fill and mask have been
    added.
  - Compositing
    A new Sun Beams node has been added to the compositor.
  - Game Development
    A new Mouse Actuator that can achieve a mouse look effect (among other
    things), has been added.
    The Property Sensor has new evaluation types.
    The TrackTo Actuator has new menus to select up/track axis.
    The Property Actuator has a new level mode.
    The Mouse-Over-Any Sensor has new X-Ray and Property/Material detection
    options.
    A new BGE Debug and Contraints Wrapper API have been added.
  - Freestyle NPR Rendering
    The Freestyle line rendering engine has been integrated into Cycles in
    addition to the Blender Internal (BI). Freestyle provides Cycles users
    with a versatile non-photorealistic (NPR) line rendering solution. Most
    Freestyle options work in the same way for both Cycles and BI. Line
    textures in Freestyle for Cycles are defined by means of shader nodes
    (unlike Freestyle for BI, which relies on the conventional texture mapping
    and influence panels). New per-material Freestyle line settings provide a
    reliable mean to specify line colors applicable to both Cycles and the
    BI. The Freestyle Python API also has user-visible updates for better code
    readability and run-time performance.
  - Animation
    More Features
    Color ramps now support color interpolation in hue mode both clock-wise
    and counter-clock-wise.
    CtrlF in Animation Editors, is a convenience shortcut to activate Filter
    by Name functionality.
    Weights now draw in wireframe mode in the 3D view.
    Temporary data gets deleted when closing Blender.
    The Video Editor has a new Gaussian blur filter.
    New camera presets: Blackmagic Pocket Cinema and Blackmagic Production
    4K.
  - Addons
    FBX improvements: Import now supports armatures, shapekeys, animations,
    with shapekeys also being supported for export.
    New DXF importer supports 3D(SubD) geometry, and geo-referencing. It
    imports curves as curve obkects and adds control over various geometry merge
    options.
    New UV addon for align distribution and copy/paste (!!) of UVs.
    New Game Publishing Addon is available for game developers!
    New addon for named layers &amp; grouped layer management.</changelog>
<changelog author="stephan.barth@suse.com" date="1415880000">- Update to version 2.72b, which is like 2.72a a bugfix release
  A list of fixes can be found here:
  2.72a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72a:_Bug_Fixes
  2.72b:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72b:_Bug_Fixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416312000">- fix bashisms in post scripts</changelog>
<changelog author="dimstar@opensuse.org" date="1419249600">- Add blender-freetype-2.5.4.patch: Silence warnings when building
  against freetype 2.5.4 (which has a structure change on FT_Bitmap).</changelog>
<changelog author="stephan.barth@suse.com" date="1424001600">- Removed blender-freetype-2.5.4.patch
- update to version 2.73a
  Important upstream changes for 2.73a:
  * Fix invalid memory access in gradient brushes - could cause a crash
    in. (ae18fd5)
  * Fix crash in texture paint sampling when sampling materials
    without. (def2ef8)
  * Fix for GTest. (73955e2)
  * Fix texture sampling with generative modifiers - sample
    backbuffer. (b996871)
  * Fix for regression in bmesh connect-pair. (dec523d)
  * Fix T43204: Shrinkwrap constraint, project mode: Space ignored in bone
    case. (599c8a2)
  * Fix T43208 material flickering in edit mode. (1864253)
  * Fix BMesh regression: behavior for select more/less. (dcd662c)
  * Fix T43229: Knife-project regression (broke knife-project). (b77dd13)
  * Fix T43156: Cycles incorrect final render, proper viewport with moblur
    disabled. (3f0113b)
  * SDL wrangler: Support loading SDL2 libraries of different names. (653c6f2)
  * Sequencer: Don't crash when trying to rebuild proxy without having
    sequence edits. (1994e84)
  * Fix T43301: Three of the 'mirror keyframes' tools were mirroring along
    wrong axis. (6e97db7)
  * Fix own error in freestyle api. (704494e)
  * Bugfix T43293: Crash when editing shared GPencil datablock in
    VSE. (32ffc63)
  * Fix for security issue loading blend's. (45dfb3b)
  * Fix T43311: using displacement shader crashes blender. (7fd4c44)
  * Fix error in freestyle api. (967f93d)
- removed blender-freetype-2.5.4.patch, which is not necessary anymore
- create %{_mandir}/man1 if it doesn't exist
- Update to version 2.73
  List of important new features from upstream:
  * User Interface
    + A new fullscreen mode without any buttons or other "annoying" elements
    to improve the UI
    + The 3D View got an option to display the world background right from
    the viewport
    + Pie Menus:
  - Confirm Threshold to confirm a pie menu without releasing the
    original key
  - Nested Pie Menus (a Pie Menu within a Pie Menu) are now supported
    + Chinese and Japanese complex character input
  * Modeling
    + Knife-tool:
  - Cuts can now be created using free-hand drawing
  - Cut-loops can now be closed by double click
    + Selection:
  - A new selection method "Select Similar Regions" was added
  - You can now skip adjacent faces while using the select more/less
    function
  * Sculpting/Painting
    + Texture Painting:
  - The Add Simple Uvs operator for texture painting now uses a simpler
    unwrap method for better quick UV layouts
  - Face-mask edges are now hidden to give proper visual feedback while
    working with masks
    + Brushes:
  - Changing brush size, detail size and strength can now be done using
    numeric keyboard input
  - Brush strength can now also be changed for Grab and Snake Hook
    brushes
  * Sequencer
    + A Backdrop similar to Compositor is now implemented for the Sequencer
    as well
    + Strips:
  - Strips can now be snapped to other strip's start- and endpoints
  - A new slip Tool allows moving content within the strip itself
  * Freestyle NPR Rendering
    + Freestyle got a new SVG exporter, implemented as an add-on
    + View maps can now be cached
    + More options for chain selection and chain sorting were added
  * Animation
    + Grease Pencil (which got a major upgrade):
  - It is now possible to edit and animate strokes (!!!)
  - New draw styles were added, e.g. filled stroke interiors, volumetric
    strokes, ...
  - The Grease Pencil's user interface (which is now completely defined
    via Python) has gotten a general overhaul
  - Two quick access pie menus were added
    + Graph Editor:
  - Revised the set of operators for showing/hiding curves from the
    keyframe area
  - Circle selection for Curves was added
  * Add-ons
    + Collada Importer:
  - Importing rigs previously caused problems with leaf bones (end bone
    of a bone chain) so a fix was created for that.
  - Added an experimental bonechain Finder to predict the longest
    possible chains of connected bones.
    + The FBX Add-on now uses some advanced handling/tweaking options for
    importing and exporting armatures
    + The Copy and Paste Add-on is now using version 2.0
  See full list of 2.73 features here:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73
  All 2.73 and 2.73a bug fixes:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73/Bug_Fixes</changelog>
<changelog author="khyota@redhyena.net" date="1424692800">- Use SDL explicitly</changelog>
<changelog author="davejplater@gmail.com" date="1425384000">- Enable build with cycles - see bnc#905649</changelog>
<changelog author="stephan.barth@suse.com" date="1432036800">- Update to version 2.74
  Short list of upstream changes:
  - Cycles got several precision, noise, speed, memory improvements, new
    Pointiness attribute.
  - Viewport has new cool compositing features, outliner now manages orphan
    datablocks better.
  - Modeling now allows custom normals, and transferring data layers between
    meshes!
  - Massive improvements to hair dynamics and editing tools: a big step forward
    with more to come...
  - A new tool “Cavity Mask” was added to  sculpting/painting, along with other
    improvements.
  - Great memory consumption optimization in Freestyle NPR stroke rendering.
  - Grease pencil and Game engine improvements, and more...
  See a full list of changes under:
  http://www.blender.org/features/2-74/</changelog>
<changelog author="stephan.barth@suse.com" date="1437307200">- Some spec file clean-up. graphviz and liblcms-devel were listed twice
- Make "-DWITH_OPENCOLLADA:BOOL=on" conditional, by using the value from
  "%define collada". Only use it when not installing openSUSE openCOLLADA. At
  the moment the upstream version doesn't work.
- Update to version 2.75a
  Short list of upstream changes for 2.75
  - Blender now supports a fully integrated Multi-View and Stereo 3D pipeline
  - Cycles has much awaited initial support for AMD GPUs, and a new Light
    Portals feature.
  - UI now allows font previews in the file browser.
  - High quality options for viewport depth of field were added
  - Modeling has a new Corrective Smooth modifier.
  - The Decimate modifier was improved significantly.
  - 3D viewport painting now supports symmetry and the distribution of Dynamic
    Topology was improved
  - Video Sequence Editor: Placeholders can now replace missing frames of
    image sequences
  - Game Engine now allows smoother LOD transitions, and supports mist
    attributes animation
  - And: 100s of bug fixes and smaller feature improvements.
  The full list of features for 2.75:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75
  A list of all bugfixes for 2.75 and 2.75a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75/Bug_Fixes</changelog>
<changelog author="davejplater@gmail.com" date="1438689600">- Enabled collada again after updating openCOLLADA to latest
  Fedora build.</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1445947200">- disable WITH_CYCLES for non intel architectures to avoid
  build failure of cycles/bvh with missing x86intrin.h
  (not sure this is the best bypass)
  Add _constraints file to avoid no space error on ppc64le
- avoid -msse* for non intel architecture</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446724800">- modify _constraints to have default disk size for all arch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446811200">- modify _constraints to add physicalmemory to 3GB</changelog>

</package>
<package pkgid="e54c8c189e0581398d9044b8eefc58978ef17b2dd5af92522a7c8ddcffac5386" name="blender-lang" arch="noarch">
    <version epoch="0" ver="2.75a" rel="4.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1382356800">- Disable sse2 instructions on non x86_64 arches, bnc#846545</changelog>
<changelog author="badshah400@gmail.com" date="1384689600">- Update to version 2.69 (for the full list see
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.69):
  + Modeling:
  - A new hidden wire display option was added to help with
    retopology
  - Mesh Bisect is a new tool to cut meshes in half
  - The Bridge, Edgenet fill, Grid fill and Symmetrize tools
    were improved
  - New curve and lattice editing tools were added too
  + Cycles Rendering:
  - Hair rendering was improved with a new Hair shader and
    reorganized settings
  - Subsurface scattering uses a new sampling algorithm and now
    supports bump mapping and texture blurring
  - Sky rendering now uses a more accurate sky model
  - New blackbody, vector transform and HSV nodes were added
  - The non-progressive integrator was renamed to Branched Path
    Integrator, and is now available for GPU rendering
  + Motion tracker now supports plane tracking, which can be used
    to replace billboards, screens and other flat things in
    footage
  + Lists in the user interface can now be resized, sorted and
    filtered
  + Small improvements for vertex parenting, empty objects, the
    shrinkwrap modifier, mask editing, armatures, f-curves and
    drivers
  + Addons:
  - FBX Import support has been added
  - FBX/OBJ can now export split normals (without the need for
    the edge split modifier)
  + Fixes for over 270 bugs.</changelog>
<changelog author="coolo@suse.de" date="1388577600">- add constraints file to avoid building on low memory (needed for
  x86_64, but it can't be limited to that arch)</changelog>
<changelog author="stephan.barth@suse.com" date="1396440000">- update to version 2.70
  Upstream changes:
  + Volumetric rendering support has been added to Cycles
  + motion tracking now supports weighted tracks
  + many user interface improvements have been made
  + New threaded dependency graph evaluation has been added
  + a laplacian deform modifier and a wireframe modifier have been added as
    well
  + many improvements to the existing toolset
  + over 560 bugfixes
- Fixed building for Python 3.4
- Delete .gitignore file
- Extended fdupes call to remove locale duplicates
- Rewrote file liste to avoid duplicate files in main and lang package. Also
  explicitly name directories.
- removed blender-2.64a-fix-locale-files-path.patch
  This patch is not needed anymore. locales are now installed in the correct
  path out of the box now.</changelog>
<changelog author="stephan.barth@suse.com" date="1396958400">- Added "Exec" and "Categories" lines to x-blend.desktop (bnc#848910)
- Check x-blend.desktop with desktop-file-validate</changelog>
<changelog author="stephan.barth@suse.com" date="1397476800">- update to bugfix version 2.70a
- fixed some paths in the spec file to reflect version number differences</changelog>
<changelog author="stephan.barth@suse.com" date="1404302400">- Introduced hard build requirement for Python3 &gt;= 3.4, because otherwise it
  won't build anymore.
- Adjusted Python 3 path for building 13.1, which doesn't build anymore anyway
- Fixed some minor spec file entries, because version string in the tarball
  changed again
- update to version 2.71 from 2.70a
  Most important changes from upstream (see full list under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.71)
  - Animation
    More easing equations added to the IPO editor for better animation
    control, locking time to other windows is again possible, auto snapping is
    now independent from display type.
    The user interface now offers more feedback, especially on errors, updates
    driver expressions automatically on editing, includes more icons and
    offers more editing tools.
    New tools also include lasso selection support, non-linked duplication for
    strips, and setting preview range based on selected strips.
  - Modelling
    The new per-face normals feature allows blender to display and export
    sharp edges correctly without geometry duplication.
    In addition, selection tools offer more options.
  - Sculpting/Painting
    New features include a HSL color wheel for color selection and tools to
    handle homogenous density in dynamic topology sculpting.
    Dyntopo and matcap display for sculpt mode have also had performance
    optimizations.
  - Game Engine
    UI to deactivate logic bricks, multi-threaded animations, shadows-only
    materials and more action layers are among the new features for the game
    engine
  - Freestyle NPR Rendering
    Freestyle has been upgraded with textured stroke support. Textured stroke
    support makes it possible to apply patterns to the lines and simulate
    rough surfaces or different kinds of brush tips for the strokes
    themselves.
    Line sorting also gives artists more control over the order of line
    drawing
  - User Interface
    Interface features include new icons for texture painting, resizeable
    preview widgets and draggable popups.
  - More Features
    More control for curve bevelling, explicit shadow cast control for blender
    internal materials, new distortion model for motion tracking and better
    handles for mask editors.</changelog>
<changelog author="stephan.barth@suse.com" date="1412596800">- update to version 2.71 to 2.72
  Changes from upstream (see full list with screenshots under
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72)
  - Cycles Rendering
    Volume rendering and Subsurface Scattering can be rendered with GPUs.
    Volume and Glossy sampling is improved.
    New Ashikhmin-Shirley distribution enhances Glossy and Anisotropic BSDFs.
    Memory usage during rendering is improved.
    OSL rendering is faster.
    Anamorphic Bokeh support added.
    Caustics are under better control.
  - User Interface
    The long awaited pie menus are available as an addon for ⇆ Tab, Z, Q, ⇆
    Tab⇧ ShiftCtrl, ., CtrlSpace operators.
    New Tooltip design makes important information more noticeable.
    Python text is displayed in a monospaced font.
    Blender Internal preview now behaves like the Cycles preview; it starts
    rendering at low resolution and improves from there.
    Units parsing has been improved, even though developers claim Blender does
    not feature a units engine, it does a better job now.
  - Modeling
    A new Intersection Tool was added to quickly cut up geometry. It's a bit
    like Boolean Tool, but, does not calculate interior/exterior.
    The Bevel Tool and the Bevel Modifier now have the option to set the
    material of the newly created faces to the material in a given slot.
  - Sculpting/Painting
    Texture painting workflow has been streamlined with easy access to painted
    images and UV layers.
    The ability to generate strokes with curves and lines has been added.
    More blend modes are available and new tools to fill and mask have been
    added.
  - Compositing
    A new Sun Beams node has been added to the compositor.
  - Game Development
    A new Mouse Actuator that can achieve a mouse look effect (among other
    things), has been added.
    The Property Sensor has new evaluation types.
    The TrackTo Actuator has new menus to select up/track axis.
    The Property Actuator has a new level mode.
    The Mouse-Over-Any Sensor has new X-Ray and Property/Material detection
    options.
    A new BGE Debug and Contraints Wrapper API have been added.
  - Freestyle NPR Rendering
    The Freestyle line rendering engine has been integrated into Cycles in
    addition to the Blender Internal (BI). Freestyle provides Cycles users
    with a versatile non-photorealistic (NPR) line rendering solution. Most
    Freestyle options work in the same way for both Cycles and BI. Line
    textures in Freestyle for Cycles are defined by means of shader nodes
    (unlike Freestyle for BI, which relies on the conventional texture mapping
    and influence panels). New per-material Freestyle line settings provide a
    reliable mean to specify line colors applicable to both Cycles and the
    BI. The Freestyle Python API also has user-visible updates for better code
    readability and run-time performance.
  - Animation
    More Features
    Color ramps now support color interpolation in hue mode both clock-wise
    and counter-clock-wise.
    CtrlF in Animation Editors, is a convenience shortcut to activate Filter
    by Name functionality.
    Weights now draw in wireframe mode in the 3D view.
    Temporary data gets deleted when closing Blender.
    The Video Editor has a new Gaussian blur filter.
    New camera presets: Blackmagic Pocket Cinema and Blackmagic Production
    4K.
  - Addons
    FBX improvements: Import now supports armatures, shapekeys, animations,
    with shapekeys also being supported for export.
    New DXF importer supports 3D(SubD) geometry, and geo-referencing. It
    imports curves as curve obkects and adds control over various geometry merge
    options.
    New UV addon for align distribution and copy/paste (!!) of UVs.
    New Game Publishing Addon is available for game developers!
    New addon for named layers &amp; grouped layer management.</changelog>
<changelog author="stephan.barth@suse.com" date="1415880000">- Update to version 2.72b, which is like 2.72a a bugfix release
  A list of fixes can be found here:
  2.72a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72a:_Bug_Fixes
  2.72b:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.72/Bug_Fixes#Blender_2.72b:_Bug_Fixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416312000">- fix bashisms in post scripts</changelog>
<changelog author="dimstar@opensuse.org" date="1419249600">- Add blender-freetype-2.5.4.patch: Silence warnings when building
  against freetype 2.5.4 (which has a structure change on FT_Bitmap).</changelog>
<changelog author="stephan.barth@suse.com" date="1424001600">- Removed blender-freetype-2.5.4.patch
- update to version 2.73a
  Important upstream changes for 2.73a:
  * Fix invalid memory access in gradient brushes - could cause a crash
    in. (ae18fd5)
  * Fix crash in texture paint sampling when sampling materials
    without. (def2ef8)
  * Fix for GTest. (73955e2)
  * Fix texture sampling with generative modifiers - sample
    backbuffer. (b996871)
  * Fix for regression in bmesh connect-pair. (dec523d)
  * Fix T43204: Shrinkwrap constraint, project mode: Space ignored in bone
    case. (599c8a2)
  * Fix T43208 material flickering in edit mode. (1864253)
  * Fix BMesh regression: behavior for select more/less. (dcd662c)
  * Fix T43229: Knife-project regression (broke knife-project). (b77dd13)
  * Fix T43156: Cycles incorrect final render, proper viewport with moblur
    disabled. (3f0113b)
  * SDL wrangler: Support loading SDL2 libraries of different names. (653c6f2)
  * Sequencer: Don't crash when trying to rebuild proxy without having
    sequence edits. (1994e84)
  * Fix T43301: Three of the 'mirror keyframes' tools were mirroring along
    wrong axis. (6e97db7)
  * Fix own error in freestyle api. (704494e)
  * Bugfix T43293: Crash when editing shared GPencil datablock in
    VSE. (32ffc63)
  * Fix for security issue loading blend's. (45dfb3b)
  * Fix T43311: using displacement shader crashes blender. (7fd4c44)
  * Fix error in freestyle api. (967f93d)
- removed blender-freetype-2.5.4.patch, which is not necessary anymore
- create %{_mandir}/man1 if it doesn't exist
- Update to version 2.73
  List of important new features from upstream:
  * User Interface
    + A new fullscreen mode without any buttons or other "annoying" elements
    to improve the UI
    + The 3D View got an option to display the world background right from
    the viewport
    + Pie Menus:
  - Confirm Threshold to confirm a pie menu without releasing the
    original key
  - Nested Pie Menus (a Pie Menu within a Pie Menu) are now supported
    + Chinese and Japanese complex character input
  * Modeling
    + Knife-tool:
  - Cuts can now be created using free-hand drawing
  - Cut-loops can now be closed by double click
    + Selection:
  - A new selection method "Select Similar Regions" was added
  - You can now skip adjacent faces while using the select more/less
    function
  * Sculpting/Painting
    + Texture Painting:
  - The Add Simple Uvs operator for texture painting now uses a simpler
    unwrap method for better quick UV layouts
  - Face-mask edges are now hidden to give proper visual feedback while
    working with masks
    + Brushes:
  - Changing brush size, detail size and strength can now be done using
    numeric keyboard input
  - Brush strength can now also be changed for Grab and Snake Hook
    brushes
  * Sequencer
    + A Backdrop similar to Compositor is now implemented for the Sequencer
    as well
    + Strips:
  - Strips can now be snapped to other strip's start- and endpoints
  - A new slip Tool allows moving content within the strip itself
  * Freestyle NPR Rendering
    + Freestyle got a new SVG exporter, implemented as an add-on
    + View maps can now be cached
    + More options for chain selection and chain sorting were added
  * Animation
    + Grease Pencil (which got a major upgrade):
  - It is now possible to edit and animate strokes (!!!)
  - New draw styles were added, e.g. filled stroke interiors, volumetric
    strokes, ...
  - The Grease Pencil's user interface (which is now completely defined
    via Python) has gotten a general overhaul
  - Two quick access pie menus were added
    + Graph Editor:
  - Revised the set of operators for showing/hiding curves from the
    keyframe area
  - Circle selection for Curves was added
  * Add-ons
    + Collada Importer:
  - Importing rigs previously caused problems with leaf bones (end bone
    of a bone chain) so a fix was created for that.
  - Added an experimental bonechain Finder to predict the longest
    possible chains of connected bones.
    + The FBX Add-on now uses some advanced handling/tweaking options for
    importing and exporting armatures
    + The Copy and Paste Add-on is now using version 2.0
  See full list of 2.73 features here:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73
  All 2.73 and 2.73a bug fixes:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.73/Bug_Fixes</changelog>
<changelog author="khyota@redhyena.net" date="1424692800">- Use SDL explicitly</changelog>
<changelog author="davejplater@gmail.com" date="1425384000">- Enable build with cycles - see bnc#905649</changelog>
<changelog author="stephan.barth@suse.com" date="1432036800">- Update to version 2.74
  Short list of upstream changes:
  - Cycles got several precision, noise, speed, memory improvements, new
    Pointiness attribute.
  - Viewport has new cool compositing features, outliner now manages orphan
    datablocks better.
  - Modeling now allows custom normals, and transferring data layers between
    meshes!
  - Massive improvements to hair dynamics and editing tools: a big step forward
    with more to come...
  - A new tool “Cavity Mask” was added to  sculpting/painting, along with other
    improvements.
  - Great memory consumption optimization in Freestyle NPR stroke rendering.
  - Grease pencil and Game engine improvements, and more...
  See a full list of changes under:
  http://www.blender.org/features/2-74/</changelog>
<changelog author="stephan.barth@suse.com" date="1437307200">- Some spec file clean-up. graphviz and liblcms-devel were listed twice
- Make "-DWITH_OPENCOLLADA:BOOL=on" conditional, by using the value from
  "%define collada". Only use it when not installing openSUSE openCOLLADA. At
  the moment the upstream version doesn't work.
- Update to version 2.75a
  Short list of upstream changes for 2.75
  - Blender now supports a fully integrated Multi-View and Stereo 3D pipeline
  - Cycles has much awaited initial support for AMD GPUs, and a new Light
    Portals feature.
  - UI now allows font previews in the file browser.
  - High quality options for viewport depth of field were added
  - Modeling has a new Corrective Smooth modifier.
  - The Decimate modifier was improved significantly.
  - 3D viewport painting now supports symmetry and the distribution of Dynamic
    Topology was improved
  - Video Sequence Editor: Placeholders can now replace missing frames of
    image sequences
  - Game Engine now allows smoother LOD transitions, and supports mist
    attributes animation
  - And: 100s of bug fixes and smaller feature improvements.
  The full list of features for 2.75:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75
  A list of all bugfixes for 2.75 and 2.75a:
  http://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.75/Bug_Fixes</changelog>
<changelog author="davejplater@gmail.com" date="1438689600">- Enabled collada again after updating openCOLLADA to latest
  Fedora build.</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1445947200">- disable WITH_CYCLES for non intel architectures to avoid
  build failure of cycles/bvh with missing x86intrin.h
  (not sure this is the best bypass)
  Add _constraints file to avoid no space error on ppc64le
- avoid -msse* for non intel architecture</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446724800">- modify _constraints to have default disk size for all arch</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1446811200">- modify _constraints to add physicalmemory to 3GB</changelog>

</package>
<package pkgid="24cfbda85f4dc42334230e58e7332db98be38c7a52f4f175efe771999243dbe8" name="bouncycastle" arch="noarch">
    <version epoch="0" ver="1.53" rel="16.1"/>

<changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
<changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
<changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
<changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
<changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
<changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
<changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
<changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
<changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>

</package>
<package pkgid="c4416b7940d071669bbfd9228074ce30c3e0077f48bee5b8491b28a56ded3663" name="bouncycastle" arch="src">
    <version epoch="0" ver="1.53" rel="16.1"/>

<changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
<changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
<changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
<changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
<changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
<changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
<changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
<changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
<changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>

</package>
<package pkgid="8119eebe2787b0d1e92be17637d3adf651912871a57a91801a07e2d21a390a25" name="bouncycastle-javadoc" arch="noarch">
    <version epoch="0" ver="1.53" rel="16.1"/>

<changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
<changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
<changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
<changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
<changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
<changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
<changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
<changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
<changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>

</package>
<package pkgid="9aa074c8a309fee20f478aae4b198f35d6f4034bf3f665a64b00b7b6aeb8515f" name="clamav-database" arch="noarch">
    <version epoch="0" ver="201511031116" rel="3.1"/>

<changelog author="ro@suse.com" date="1399982400">- database refresh</changelog>
<changelog author="draht@suse.com" date="1403006400">- database refresh</changelog>
<changelog author="ro@suse.com" date="1404820800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405512000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405944000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1406116800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407153600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407931200">- database refresh</changelog>
<changelog author="ro@suse.com" date="1409745600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411041600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411473600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1415880000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1421409600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507201">- updated to 2015-03-16 17:18</changelog>
<changelog author="meissner@suse.com" date="1439985600">- database refresh to 2015-08-19 12:52 state</changelog>
<changelog author="meissner@suse.com" date="1445947200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446292800">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552001">- database refresh</changelog>

</package>
<package pkgid="91d9adb4d5ff9e2ea8394108ce8cfc27e5f926878dd419783d342334ecb6deb9" name="clamav-database" arch="noarch">
    <version epoch="0" ver="201511090000" rel="6.1"/>

<changelog author="draht@suse.com" date="1403006400">- database refresh</changelog>
<changelog author="ro@suse.com" date="1404820800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405512000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405944000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1406116800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407153600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407931200">- database refresh</changelog>
<changelog author="ro@suse.com" date="1409745600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411041600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411473600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1415880000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1421409600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507201">- updated to 2015-03-16 17:18</changelog>
<changelog author="meissner@suse.com" date="1439985600">- database refresh to 2015-08-19 12:52 state</changelog>
<changelog author="meissner@suse.com" date="1445947200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446292800">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552001">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446984000">- database refresh</changelog>

</package>
<package pkgid="959583c5d904f38e7a75f55f862ab7030e01d7d2aa6660feae82c93a3eaa3559" name="clamav-database" arch="src">
    <version epoch="0" ver="201511031116" rel="3.1"/>

<changelog author="ro@suse.com" date="1399982400">- database refresh</changelog>
<changelog author="draht@suse.com" date="1403006400">- database refresh</changelog>
<changelog author="ro@suse.com" date="1404820800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405512000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405944000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1406116800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407153600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407931200">- database refresh</changelog>
<changelog author="ro@suse.com" date="1409745600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411041600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411473600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1415880000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1421409600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507201">- updated to 2015-03-16 17:18</changelog>
<changelog author="meissner@suse.com" date="1439985600">- database refresh to 2015-08-19 12:52 state</changelog>
<changelog author="meissner@suse.com" date="1445947200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446292800">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552001">- database refresh</changelog>

</package>
<package pkgid="c918819a264fedd8e1908ca43e9ee72895ae6ddde14912ee5c092288dcebb2e1" name="clamav-database" arch="src">
    <version epoch="0" ver="201511090000" rel="6.1"/>

<changelog author="draht@suse.com" date="1403006400">- database refresh</changelog>
<changelog author="ro@suse.com" date="1404820800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405512000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1405944000">- database refresh</changelog>
<changelog author="ro@suse.com" date="1406116800">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407153600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1407931200">- database refresh</changelog>
<changelog author="ro@suse.com" date="1409745600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411041600">- database refresh</changelog>
<changelog author="ro@suse.com" date="1411473600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1415880000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1421409600">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1426507201">- updated to 2015-03-16 17:18</changelog>
<changelog author="meissner@suse.com" date="1439985600">- database refresh to 2015-08-19 12:52 state</changelog>
<changelog author="meissner@suse.com" date="1445947200">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446292800">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552000">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446552001">- database refresh</changelog>
<changelog author="meissner@suse.com" date="1446984000">- database refresh</changelog>

</package>
<package pkgid="35889e000b8a2b8bb2f63b362af22430e278d3a52f6e66379d8af5620177d56f" name="conky" arch="src">
    <version epoch="0" ver="1.10.0" rel="3.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1241352000">- update to 1.7.0</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244548800">- update to 1.7.1</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244894400">- update to 1.7.1.1:
  * fixed a regression which causes fonts to not be rendered properly with
    certain types of windows
  * fix bug in comments within TEXT (where the line contains just '#') (sf.net
    [#2803586])
  * fix bug in $mails (sf.net #2802529)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1254312000">- update to 1.7.2:
  * fixed minor memleak in pop3/imap code on config reload
  * fix crash when using $if_match with objects that may return a null pointer
    (like $rss, $weather, or $curl before data is available)
  * removed alias config option due to brokenness
  * changed xoap parsing method to xpath, in preparation to include forecast
    data
  * update MPD elapsed/progress when stopped (sf.net #2792113)
  * overhauled RSS and weather, added $curl
  * added support for X alignment across multi-lined objects (i.e., using
    $alignr with $exec)
  * www.weather.com can now be used as well as a source of weather dataµ
  * added support for $desktop, $desktop_number and $desktop_name (sf.net
    [#2040528])
  * added support for $swapfree
  * improved Lua API (lua_read_parse has been removed in favour of the
    conky_parse() Lua API call)
  * introduced new Lua Cairo and Imlib2 bindings
  * added support for $weather (experimental)
  * remove newline with comment only lines in TEXT
  * improved parsing of graph arguments, removed "log"|"normal" arguments in
    favour of -l switch
  * fix escaping of comments in TEXT (sf.net #2813390)
  * fix segfault in to_real_path, it's sometimes called with the same source
    and dest without checking the length, causing a segfault
  * use the internal process list for if_running on Linux</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1278244800">- update to 1.8.0
- split out -doc subpackage
- package vim and nano syntax highlighting configuration files into subpackages
  (instead of packaging them under the docdir)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1286539200">- dropped conky-getaddrinfo.patch, was merged upstream
  (PATCH-FIX-OPENSUSE conky-getaddrinfo.patch fix-for-opensuse-specific-things.patch sf#3045085 pascal.bleser@opensuse.org)
- update to 1.8.1:
  * allow method to pass execgraph arguments containing spaces
  * abort curl transfers if they drop below 1000B/s for more than 60s
  * fix short_units for below kilo values
  * when we have a failure in mail thread, sleep for a bit
  * improve failure handling in mail threads
  * when we have a failure in the mail thread, lookup the hostname again in
    case the failure is due odd to DNS changes, or some other madness
  * fix segfault in ccurl_thread.c
  * fix crash in mail stuff due to bad free()
  * fix segfault in i8k (sf.net #3007167)
  * use getaddrinfo instead of gethostbyname: patches conky to use getaddrinfo
    instead of gethostbyname everywhere. gethostbyname is rather flawed and
    doesn't support IPv6 properly. Patch contributed by Pascal Bleser.
  * fix 'nvidia with ncurses segfaults' (sf.net #3006233)
  * make $fs_used_perc and $fs_bar report used space correctly; they reported
    fs-&gt;size - fs-&gt;avail, which is not correct if fs has super-user reserved
    blocks; note that now $fs_used_perc and $fs_free_perc need not add up to
    100%, but that is consistent with what $fs_used and $fs_free do
  * fix buffer overflows in eve.c (sf.net #3034056)
  * fix bug where IMAP doesn't refresh counts after IDLE timeout
  * fix segfault in mail folder (SF: 3007493)
  * fix alignment ($align[rc]) issue for exec &amp; lua objects
  * small build fix &amp; zero playtime and progress bars when XMMS2 playback is stopped
  * fix tiny memleak when $top is used wrong
  * ${top}, ${top_mem} and ${top_time} are now recognized as variables; the
    parts of code doing this were in a #ifdef __linux__; the total CPU time of
    processes (${top} with "time" argument) is now printable, and ${top_time}
    works
  * fix battery_bar not parsing arguments correctly (sf: #2998034, lp: #569195)
  * bugfix: RSS interval was in secs instead of mins
  * bugfix: $alignr only worked on the first line of $execp, $execpi, $lua and $lua_parse
  * bugfix: memory and thread-deleting problems
  * bugfix: read_tcp treated a succesfull connection as failed and vice versa
  * add $nodename_short
  * bugfix: adding/removing use_xft in the config had no effect unless you
    restarted conky, reloading the config was not enough
  * fix building with Audacious &gt;= 2.3
  * bugfix: mixerbar showed wrong values
  * bugfix: ac-adapter is sometimes called ADP1 in sysfs instead of AC
  * bugfix: battery_bar should also work without argument
  * bugfix: When the first line behind TEXT was a comment, the start of the
    second line wasn't parsed
  * fix X error when border_width is &lt;1
  * fix device name parsing for diskio variables
  * fix bug in $if_existing</changelog>
<changelog author="nmarques@opensuse.org" date="1317038400">- Add conky-fix-curl-FTBFS.patch: remove deprecated curl/types.h
  to fix FTBFS with newer versions of curl.
  Upstream: http://tinyurl.com/4x76bbx</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317038401">- fix build issue with files in conky-doc</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317297600">- add cairo and imlib support where tolua++ is available,
  built as subpackages (conky-cairo and conky-imlib2)
- add patch to add -lm when linking against libiw, which is required by some
  more recent versions of libiw</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="coolo@suse.com" date="1327924800">- use lua51 on factory</changelog>
<changelog author="cfarrell@suse.com" date="1330516800">- license update: GPL-3.0+
  See the COPYING file</changelog>
<changelog author="toganm@opensuse.org" date="1340280000">- Update to 1.9.0 for changes please see
  http://conky.sourceforge.net/changelog.html
  * reworked conky-libiw_with_libm.patch as conky-1.9.0-libiw_with_libm.patch
  * removed conky-fix-curl-FTBFS.patch as fixed by upstream</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>

</package>
<package pkgid="c70bd2b551a1ef82b5ec37743ec5fc55643b5d5771031047582cd3ea12ad2511" name="conky" arch="x86_64">
    <version epoch="0" ver="1.10.0" rel="3.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1241352000">- update to 1.7.0</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244548800">- update to 1.7.1</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244894400">- update to 1.7.1.1:
  * fixed a regression which causes fonts to not be rendered properly with
    certain types of windows
  * fix bug in comments within TEXT (where the line contains just '#') (sf.net
    [#2803586])
  * fix bug in $mails (sf.net #2802529)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1254312000">- update to 1.7.2:
  * fixed minor memleak in pop3/imap code on config reload
  * fix crash when using $if_match with objects that may return a null pointer
    (like $rss, $weather, or $curl before data is available)
  * removed alias config option due to brokenness
  * changed xoap parsing method to xpath, in preparation to include forecast
    data
  * update MPD elapsed/progress when stopped (sf.net #2792113)
  * overhauled RSS and weather, added $curl
  * added support for X alignment across multi-lined objects (i.e., using
    $alignr with $exec)
  * www.weather.com can now be used as well as a source of weather dataµ
  * added support for $desktop, $desktop_number and $desktop_name (sf.net
    [#2040528])
  * added support for $swapfree
  * improved Lua API (lua_read_parse has been removed in favour of the
    conky_parse() Lua API call)
  * introduced new Lua Cairo and Imlib2 bindings
  * added support for $weather (experimental)
  * remove newline with comment only lines in TEXT
  * improved parsing of graph arguments, removed "log"|"normal" arguments in
    favour of -l switch
  * fix escaping of comments in TEXT (sf.net #2813390)
  * fix segfault in to_real_path, it's sometimes called with the same source
    and dest without checking the length, causing a segfault
  * use the internal process list for if_running on Linux</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1278244800">- update to 1.8.0
- split out -doc subpackage
- package vim and nano syntax highlighting configuration files into subpackages
  (instead of packaging them under the docdir)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1286539200">- dropped conky-getaddrinfo.patch, was merged upstream
  (PATCH-FIX-OPENSUSE conky-getaddrinfo.patch fix-for-opensuse-specific-things.patch sf#3045085 pascal.bleser@opensuse.org)
- update to 1.8.1:
  * allow method to pass execgraph arguments containing spaces
  * abort curl transfers if they drop below 1000B/s for more than 60s
  * fix short_units for below kilo values
  * when we have a failure in mail thread, sleep for a bit
  * improve failure handling in mail threads
  * when we have a failure in the mail thread, lookup the hostname again in
    case the failure is due odd to DNS changes, or some other madness
  * fix segfault in ccurl_thread.c
  * fix crash in mail stuff due to bad free()
  * fix segfault in i8k (sf.net #3007167)
  * use getaddrinfo instead of gethostbyname: patches conky to use getaddrinfo
    instead of gethostbyname everywhere. gethostbyname is rather flawed and
    doesn't support IPv6 properly. Patch contributed by Pascal Bleser.
  * fix 'nvidia with ncurses segfaults' (sf.net #3006233)
  * make $fs_used_perc and $fs_bar report used space correctly; they reported
    fs-&gt;size - fs-&gt;avail, which is not correct if fs has super-user reserved
    blocks; note that now $fs_used_perc and $fs_free_perc need not add up to
    100%, but that is consistent with what $fs_used and $fs_free do
  * fix buffer overflows in eve.c (sf.net #3034056)
  * fix bug where IMAP doesn't refresh counts after IDLE timeout
  * fix segfault in mail folder (SF: 3007493)
  * fix alignment ($align[rc]) issue for exec &amp; lua objects
  * small build fix &amp; zero playtime and progress bars when XMMS2 playback is stopped
  * fix tiny memleak when $top is used wrong
  * ${top}, ${top_mem} and ${top_time} are now recognized as variables; the
    parts of code doing this were in a #ifdef __linux__; the total CPU time of
    processes (${top} with "time" argument) is now printable, and ${top_time}
    works
  * fix battery_bar not parsing arguments correctly (sf: #2998034, lp: #569195)
  * bugfix: RSS interval was in secs instead of mins
  * bugfix: $alignr only worked on the first line of $execp, $execpi, $lua and $lua_parse
  * bugfix: memory and thread-deleting problems
  * bugfix: read_tcp treated a succesfull connection as failed and vice versa
  * add $nodename_short
  * bugfix: adding/removing use_xft in the config had no effect unless you
    restarted conky, reloading the config was not enough
  * fix building with Audacious &gt;= 2.3
  * bugfix: mixerbar showed wrong values
  * bugfix: ac-adapter is sometimes called ADP1 in sysfs instead of AC
  * bugfix: battery_bar should also work without argument
  * bugfix: When the first line behind TEXT was a comment, the start of the
    second line wasn't parsed
  * fix X error when border_width is &lt;1
  * fix device name parsing for diskio variables
  * fix bug in $if_existing</changelog>
<changelog author="nmarques@opensuse.org" date="1317038400">- Add conky-fix-curl-FTBFS.patch: remove deprecated curl/types.h
  to fix FTBFS with newer versions of curl.
  Upstream: http://tinyurl.com/4x76bbx</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317038401">- fix build issue with files in conky-doc</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317297600">- add cairo and imlib support where tolua++ is available,
  built as subpackages (conky-cairo and conky-imlib2)
- add patch to add -lm when linking against libiw, which is required by some
  more recent versions of libiw</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="coolo@suse.com" date="1327924800">- use lua51 on factory</changelog>
<changelog author="cfarrell@suse.com" date="1330516800">- license update: GPL-3.0+
  See the COPYING file</changelog>
<changelog author="toganm@opensuse.org" date="1340280000">- Update to 1.9.0 for changes please see
  http://conky.sourceforge.net/changelog.html
  * reworked conky-libiw_with_libm.patch as conky-1.9.0-libiw_with_libm.patch
  * removed conky-fix-curl-FTBFS.patch as fixed by upstream</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>

</package>
<package pkgid="76339f28e4ced8492598ba13afcefd802767cbe22274189e382dc0e91a219b25" name="conky-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.10.0" rel="3.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1241352000">- update to 1.7.0</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244548800">- update to 1.7.1</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244894400">- update to 1.7.1.1:
  * fixed a regression which causes fonts to not be rendered properly with
    certain types of windows
  * fix bug in comments within TEXT (where the line contains just '#') (sf.net
    [#2803586])
  * fix bug in $mails (sf.net #2802529)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1254312000">- update to 1.7.2:
  * fixed minor memleak in pop3/imap code on config reload
  * fix crash when using $if_match with objects that may return a null pointer
    (like $rss, $weather, or $curl before data is available)
  * removed alias config option due to brokenness
  * changed xoap parsing method to xpath, in preparation to include forecast
    data
  * update MPD elapsed/progress when stopped (sf.net #2792113)
  * overhauled RSS and weather, added $curl
  * added support for X alignment across multi-lined objects (i.e., using
    $alignr with $exec)
  * www.weather.com can now be used as well as a source of weather dataµ
  * added support for $desktop, $desktop_number and $desktop_name (sf.net
    [#2040528])
  * added support for $swapfree
  * improved Lua API (lua_read_parse has been removed in favour of the
    conky_parse() Lua API call)
  * introduced new Lua Cairo and Imlib2 bindings
  * added support for $weather (experimental)
  * remove newline with comment only lines in TEXT
  * improved parsing of graph arguments, removed "log"|"normal" arguments in
    favour of -l switch
  * fix escaping of comments in TEXT (sf.net #2813390)
  * fix segfault in to_real_path, it's sometimes called with the same source
    and dest without checking the length, causing a segfault
  * use the internal process list for if_running on Linux</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1278244800">- update to 1.8.0
- split out -doc subpackage
- package vim and nano syntax highlighting configuration files into subpackages
  (instead of packaging them under the docdir)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1286539200">- dropped conky-getaddrinfo.patch, was merged upstream
  (PATCH-FIX-OPENSUSE conky-getaddrinfo.patch fix-for-opensuse-specific-things.patch sf#3045085 pascal.bleser@opensuse.org)
- update to 1.8.1:
  * allow method to pass execgraph arguments containing spaces
  * abort curl transfers if they drop below 1000B/s for more than 60s
  * fix short_units for below kilo values
  * when we have a failure in mail thread, sleep for a bit
  * improve failure handling in mail threads
  * when we have a failure in the mail thread, lookup the hostname again in
    case the failure is due odd to DNS changes, or some other madness
  * fix segfault in ccurl_thread.c
  * fix crash in mail stuff due to bad free()
  * fix segfault in i8k (sf.net #3007167)
  * use getaddrinfo instead of gethostbyname: patches conky to use getaddrinfo
    instead of gethostbyname everywhere. gethostbyname is rather flawed and
    doesn't support IPv6 properly. Patch contributed by Pascal Bleser.
  * fix 'nvidia with ncurses segfaults' (sf.net #3006233)
  * make $fs_used_perc and $fs_bar report used space correctly; they reported
    fs-&gt;size - fs-&gt;avail, which is not correct if fs has super-user reserved
    blocks; note that now $fs_used_perc and $fs_free_perc need not add up to
    100%, but that is consistent with what $fs_used and $fs_free do
  * fix buffer overflows in eve.c (sf.net #3034056)
  * fix bug where IMAP doesn't refresh counts after IDLE timeout
  * fix segfault in mail folder (SF: 3007493)
  * fix alignment ($align[rc]) issue for exec &amp; lua objects
  * small build fix &amp; zero playtime and progress bars when XMMS2 playback is stopped
  * fix tiny memleak when $top is used wrong
  * ${top}, ${top_mem} and ${top_time} are now recognized as variables; the
    parts of code doing this were in a #ifdef __linux__; the total CPU time of
    processes (${top} with "time" argument) is now printable, and ${top_time}
    works
  * fix battery_bar not parsing arguments correctly (sf: #2998034, lp: #569195)
  * bugfix: RSS interval was in secs instead of mins
  * bugfix: $alignr only worked on the first line of $execp, $execpi, $lua and $lua_parse
  * bugfix: memory and thread-deleting problems
  * bugfix: read_tcp treated a succesfull connection as failed and vice versa
  * add $nodename_short
  * bugfix: adding/removing use_xft in the config had no effect unless you
    restarted conky, reloading the config was not enough
  * fix building with Audacious &gt;= 2.3
  * bugfix: mixerbar showed wrong values
  * bugfix: ac-adapter is sometimes called ADP1 in sysfs instead of AC
  * bugfix: battery_bar should also work without argument
  * bugfix: When the first line behind TEXT was a comment, the start of the
    second line wasn't parsed
  * fix X error when border_width is &lt;1
  * fix device name parsing for diskio variables
  * fix bug in $if_existing</changelog>
<changelog author="nmarques@opensuse.org" date="1317038400">- Add conky-fix-curl-FTBFS.patch: remove deprecated curl/types.h
  to fix FTBFS with newer versions of curl.
  Upstream: http://tinyurl.com/4x76bbx</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317038401">- fix build issue with files in conky-doc</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317297600">- add cairo and imlib support where tolua++ is available,
  built as subpackages (conky-cairo and conky-imlib2)
- add patch to add -lm when linking against libiw, which is required by some
  more recent versions of libiw</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="coolo@suse.com" date="1327924800">- use lua51 on factory</changelog>
<changelog author="cfarrell@suse.com" date="1330516800">- license update: GPL-3.0+
  See the COPYING file</changelog>
<changelog author="toganm@opensuse.org" date="1340280000">- Update to 1.9.0 for changes please see
  http://conky.sourceforge.net/changelog.html
  * reworked conky-libiw_with_libm.patch as conky-1.9.0-libiw_with_libm.patch
  * removed conky-fix-curl-FTBFS.patch as fixed by upstream</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>

</package>
<package pkgid="b7c8e8be710cc12b4a7fda06f3b6f0a7b973488e23d46f341bf57249f3393b1b" name="conky-debugsource" arch="x86_64">
    <version epoch="0" ver="1.10.0" rel="3.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1241352000">- update to 1.7.0</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244548800">- update to 1.7.1</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244894400">- update to 1.7.1.1:
  * fixed a regression which causes fonts to not be rendered properly with
    certain types of windows
  * fix bug in comments within TEXT (where the line contains just '#') (sf.net
    [#2803586])
  * fix bug in $mails (sf.net #2802529)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1254312000">- update to 1.7.2:
  * fixed minor memleak in pop3/imap code on config reload
  * fix crash when using $if_match with objects that may return a null pointer
    (like $rss, $weather, or $curl before data is available)
  * removed alias config option due to brokenness
  * changed xoap parsing method to xpath, in preparation to include forecast
    data
  * update MPD elapsed/progress when stopped (sf.net #2792113)
  * overhauled RSS and weather, added $curl
  * added support for X alignment across multi-lined objects (i.e., using
    $alignr with $exec)
  * www.weather.com can now be used as well as a source of weather dataµ
  * added support for $desktop, $desktop_number and $desktop_name (sf.net
    [#2040528])
  * added support for $swapfree
  * improved Lua API (lua_read_parse has been removed in favour of the
    conky_parse() Lua API call)
  * introduced new Lua Cairo and Imlib2 bindings
  * added support for $weather (experimental)
  * remove newline with comment only lines in TEXT
  * improved parsing of graph arguments, removed "log"|"normal" arguments in
    favour of -l switch
  * fix escaping of comments in TEXT (sf.net #2813390)
  * fix segfault in to_real_path, it's sometimes called with the same source
    and dest without checking the length, causing a segfault
  * use the internal process list for if_running on Linux</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1278244800">- update to 1.8.0
- split out -doc subpackage
- package vim and nano syntax highlighting configuration files into subpackages
  (instead of packaging them under the docdir)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1286539200">- dropped conky-getaddrinfo.patch, was merged upstream
  (PATCH-FIX-OPENSUSE conky-getaddrinfo.patch fix-for-opensuse-specific-things.patch sf#3045085 pascal.bleser@opensuse.org)
- update to 1.8.1:
  * allow method to pass execgraph arguments containing spaces
  * abort curl transfers if they drop below 1000B/s for more than 60s
  * fix short_units for below kilo values
  * when we have a failure in mail thread, sleep for a bit
  * improve failure handling in mail threads
  * when we have a failure in the mail thread, lookup the hostname again in
    case the failure is due odd to DNS changes, or some other madness
  * fix segfault in ccurl_thread.c
  * fix crash in mail stuff due to bad free()
  * fix segfault in i8k (sf.net #3007167)
  * use getaddrinfo instead of gethostbyname: patches conky to use getaddrinfo
    instead of gethostbyname everywhere. gethostbyname is rather flawed and
    doesn't support IPv6 properly. Patch contributed by Pascal Bleser.
  * fix 'nvidia with ncurses segfaults' (sf.net #3006233)
  * make $fs_used_perc and $fs_bar report used space correctly; they reported
    fs-&gt;size - fs-&gt;avail, which is not correct if fs has super-user reserved
    blocks; note that now $fs_used_perc and $fs_free_perc need not add up to
    100%, but that is consistent with what $fs_used and $fs_free do
  * fix buffer overflows in eve.c (sf.net #3034056)
  * fix bug where IMAP doesn't refresh counts after IDLE timeout
  * fix segfault in mail folder (SF: 3007493)
  * fix alignment ($align[rc]) issue for exec &amp; lua objects
  * small build fix &amp; zero playtime and progress bars when XMMS2 playback is stopped
  * fix tiny memleak when $top is used wrong
  * ${top}, ${top_mem} and ${top_time} are now recognized as variables; the
    parts of code doing this were in a #ifdef __linux__; the total CPU time of
    processes (${top} with "time" argument) is now printable, and ${top_time}
    works
  * fix battery_bar not parsing arguments correctly (sf: #2998034, lp: #569195)
  * bugfix: RSS interval was in secs instead of mins
  * bugfix: $alignr only worked on the first line of $execp, $execpi, $lua and $lua_parse
  * bugfix: memory and thread-deleting problems
  * bugfix: read_tcp treated a succesfull connection as failed and vice versa
  * add $nodename_short
  * bugfix: adding/removing use_xft in the config had no effect unless you
    restarted conky, reloading the config was not enough
  * fix building with Audacious &gt;= 2.3
  * bugfix: mixerbar showed wrong values
  * bugfix: ac-adapter is sometimes called ADP1 in sysfs instead of AC
  * bugfix: battery_bar should also work without argument
  * bugfix: When the first line behind TEXT was a comment, the start of the
    second line wasn't parsed
  * fix X error when border_width is &lt;1
  * fix device name parsing for diskio variables
  * fix bug in $if_existing</changelog>
<changelog author="nmarques@opensuse.org" date="1317038400">- Add conky-fix-curl-FTBFS.patch: remove deprecated curl/types.h
  to fix FTBFS with newer versions of curl.
  Upstream: http://tinyurl.com/4x76bbx</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317038401">- fix build issue with files in conky-doc</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317297600">- add cairo and imlib support where tolua++ is available,
  built as subpackages (conky-cairo and conky-imlib2)
- add patch to add -lm when linking against libiw, which is required by some
  more recent versions of libiw</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="coolo@suse.com" date="1327924800">- use lua51 on factory</changelog>
<changelog author="cfarrell@suse.com" date="1330516800">- license update: GPL-3.0+
  See the COPYING file</changelog>
<changelog author="toganm@opensuse.org" date="1340280000">- Update to 1.9.0 for changes please see
  http://conky.sourceforge.net/changelog.html
  * reworked conky-libiw_with_libm.patch as conky-1.9.0-libiw_with_libm.patch
  * removed conky-fix-curl-FTBFS.patch as fixed by upstream</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>

</package>
<package pkgid="9561c70ac5c41a9126ffad871a89e25503bf69512cb7cad6a5c6ab06408bf32f" name="conky-doc" arch="x86_64">
    <version epoch="0" ver="1.10.0" rel="3.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1241352000">- update to 1.7.0</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244548800">- update to 1.7.1</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244894400">- update to 1.7.1.1:
  * fixed a regression which causes fonts to not be rendered properly with
    certain types of windows
  * fix bug in comments within TEXT (where the line contains just '#') (sf.net
    [#2803586])
  * fix bug in $mails (sf.net #2802529)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1254312000">- update to 1.7.2:
  * fixed minor memleak in pop3/imap code on config reload
  * fix crash when using $if_match with objects that may return a null pointer
    (like $rss, $weather, or $curl before data is available)
  * removed alias config option due to brokenness
  * changed xoap parsing method to xpath, in preparation to include forecast
    data
  * update MPD elapsed/progress when stopped (sf.net #2792113)
  * overhauled RSS and weather, added $curl
  * added support for X alignment across multi-lined objects (i.e., using
    $alignr with $exec)
  * www.weather.com can now be used as well as a source of weather dataµ
  * added support for $desktop, $desktop_number and $desktop_name (sf.net
    [#2040528])
  * added support for $swapfree
  * improved Lua API (lua_read_parse has been removed in favour of the
    conky_parse() Lua API call)
  * introduced new Lua Cairo and Imlib2 bindings
  * added support for $weather (experimental)
  * remove newline with comment only lines in TEXT
  * improved parsing of graph arguments, removed "log"|"normal" arguments in
    favour of -l switch
  * fix escaping of comments in TEXT (sf.net #2813390)
  * fix segfault in to_real_path, it's sometimes called with the same source
    and dest without checking the length, causing a segfault
  * use the internal process list for if_running on Linux</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1278244800">- update to 1.8.0
- split out -doc subpackage
- package vim and nano syntax highlighting configuration files into subpackages
  (instead of packaging them under the docdir)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1286539200">- dropped conky-getaddrinfo.patch, was merged upstream
  (PATCH-FIX-OPENSUSE conky-getaddrinfo.patch fix-for-opensuse-specific-things.patch sf#3045085 pascal.bleser@opensuse.org)
- update to 1.8.1:
  * allow method to pass execgraph arguments containing spaces
  * abort curl transfers if they drop below 1000B/s for more than 60s
  * fix short_units for below kilo values
  * when we have a failure in mail thread, sleep for a bit
  * improve failure handling in mail threads
  * when we have a failure in the mail thread, lookup the hostname again in
    case the failure is due odd to DNS changes, or some other madness
  * fix segfault in ccurl_thread.c
  * fix crash in mail stuff due to bad free()
  * fix segfault in i8k (sf.net #3007167)
  * use getaddrinfo instead of gethostbyname: patches conky to use getaddrinfo
    instead of gethostbyname everywhere. gethostbyname is rather flawed and
    doesn't support IPv6 properly. Patch contributed by Pascal Bleser.
  * fix 'nvidia with ncurses segfaults' (sf.net #3006233)
  * make $fs_used_perc and $fs_bar report used space correctly; they reported
    fs-&gt;size - fs-&gt;avail, which is not correct if fs has super-user reserved
    blocks; note that now $fs_used_perc and $fs_free_perc need not add up to
    100%, but that is consistent with what $fs_used and $fs_free do
  * fix buffer overflows in eve.c (sf.net #3034056)
  * fix bug where IMAP doesn't refresh counts after IDLE timeout
  * fix segfault in mail folder (SF: 3007493)
  * fix alignment ($align[rc]) issue for exec &amp; lua objects
  * small build fix &amp; zero playtime and progress bars when XMMS2 playback is stopped
  * fix tiny memleak when $top is used wrong
  * ${top}, ${top_mem} and ${top_time} are now recognized as variables; the
    parts of code doing this were in a #ifdef __linux__; the total CPU time of
    processes (${top} with "time" argument) is now printable, and ${top_time}
    works
  * fix battery_bar not parsing arguments correctly (sf: #2998034, lp: #569195)
  * bugfix: RSS interval was in secs instead of mins
  * bugfix: $alignr only worked on the first line of $execp, $execpi, $lua and $lua_parse
  * bugfix: memory and thread-deleting problems
  * bugfix: read_tcp treated a succesfull connection as failed and vice versa
  * add $nodename_short
  * bugfix: adding/removing use_xft in the config had no effect unless you
    restarted conky, reloading the config was not enough
  * fix building with Audacious &gt;= 2.3
  * bugfix: mixerbar showed wrong values
  * bugfix: ac-adapter is sometimes called ADP1 in sysfs instead of AC
  * bugfix: battery_bar should also work without argument
  * bugfix: When the first line behind TEXT was a comment, the start of the
    second line wasn't parsed
  * fix X error when border_width is &lt;1
  * fix device name parsing for diskio variables
  * fix bug in $if_existing</changelog>
<changelog author="nmarques@opensuse.org" date="1317038400">- Add conky-fix-curl-FTBFS.patch: remove deprecated curl/types.h
  to fix FTBFS with newer versions of curl.
  Upstream: http://tinyurl.com/4x76bbx</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317038401">- fix build issue with files in conky-doc</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317297600">- add cairo and imlib support where tolua++ is available,
  built as subpackages (conky-cairo and conky-imlib2)
- add patch to add -lm when linking against libiw, which is required by some
  more recent versions of libiw</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="coolo@suse.com" date="1327924800">- use lua51 on factory</changelog>
<changelog author="cfarrell@suse.com" date="1330516800">- license update: GPL-3.0+
  See the COPYING file</changelog>
<changelog author="toganm@opensuse.org" date="1340280000">- Update to 1.9.0 for changes please see
  http://conky.sourceforge.net/changelog.html
  * reworked conky-libiw_with_libm.patch as conky-1.9.0-libiw_with_libm.patch
  * removed conky-fix-curl-FTBFS.patch as fixed by upstream</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>

</package>
<package pkgid="66f83c49bc61f4627edcf589b23a656d2376cc3975256b2954b43e85f4b2b7bd" name="cpp48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="4d19d2e096645cdc36d8157faf1b0ef3ef711d6272a69f87e86cfd8d776830f5" name="cpp48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f3a47029a01ecb4da2d9338a0dd9b2350387a786ba31076aea4b8f5a8e2a3e23" name="cross-aarch64-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="67a203d6a17177918ea3eb869c586bd08c94693a168cf5021a9181fa877504c3" name="cross-aarch64-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="dc0272c3409121470a4a148535cc6ff5a40c4db84e4785295effea24ae47f57b" name="cross-armv6hl-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="51593517c63019960ac4e11e26f1f539bc5ac58088274db1a2727292b5a04c4d" name="cross-armv6hl-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="9c1a708fbf60247e5008f37b33e5b6a182e2874d1fc3adf86659f70fabb06211" name="cross-armv7hl-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f4c4d7b44537eb6e8a9def174d8b5ee4bee42550bb5a4146276180ea8a3f99c0" name="cross-armv7hl-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f4a5edd35c0baa6d6d17c0b22dfb9f42e8072d3252d5a75d164d3774b5a74e5f" name="cross-hppa-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="4abd8dd466b62f61b8a54fcc1175aa729b385023b6c8071066249033d5db58b2" name="cross-hppa-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="3c1bd2439123ed786635309723a2e293653b8b46aecba7cc414f83edd8a7832b" name="cross-i386-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="e06a622f5215ac954169b3b1fe19cd23b2f523248d1fb8eb14b35a2a13393655" name="cross-i386-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="0e9d49a3ebaa5fcbee9ed43dc9780c038fcfda480fe92e89ec7e9f58e612bee7" name="cross-ia64-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="90659fc0defb482141ebd55bcb3e74b4d1d03b46a8363ac081f4523ff6c4a2d2" name="cross-ia64-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="48f58f0f694869bc33a07eed771798413134e3b2bc63937d925e0ded94659f69" name="cross-ppc-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c231ee1d5b6c1c55df9534a86ba5abbb50b1bf9080e84b9ba8441b894d8c4b6d" name="cross-ppc-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="4bcce7df46dcc74cf4c6436e1f810416cc0f77e321d036f5b8ef7a8b722fd39d" name="cross-ppc64-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="29262686bab796c66cd943ee0bae52729d1399d494bb995368fb054201d6a184" name="cross-ppc64-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="a3b6c2febf3512dd173ea0f9faad2738d635dc26825d0bfa977ae2fd8dd6fac9" name="cross-ppc64le-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="942689b3f55a0600f7e5ee8c792a1a82befd7ef69c89968e91aa6d7abad5cfc0" name="cross-ppc64le-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c1b5d1486f68dc9bb1a6bd4e715654c778f08944ca5a61ef5512c83e7fbb6f62" name="cross-s390-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="764ad318a4537f482ff7a652d19b14ba3f9ff80d9c1867fc82c454462103dd35" name="cross-s390-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="43d26216d4333cce2a84d008598bd682d7ec37d80321ba5733b07b8cf250facd" name="cross-s390x-gcc48-icecream-backend" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="d0b7eeaf45a0df42cb6722cd2f89fa3e3ad5d7db8a88e72da1e5ef57b5b9fccd" name="cross-s390x-gcc48-icecream-backend" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.2"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="1edfaaa4ba4d25263b32244f9719d4980f165b396abb6dc1b6cb62eb245dab95" name="gcc48" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="6249dba095bb59774e1e1802f49d57f8965fdd7050295c92b06d9491592a6fa0" name="gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="17fbca00ca033c1d1fbbb369dd237589f2e65f9defe105702da424e3ed11cf5f" name="gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f2c3e18a25ab208c7265fbb1ce0e7622df31b704ce92094d979e73605e713eb5" name="gcc48-ada" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="431ccb4f954917300b8dffc1001a9857ab8c12b91d5f5ff2c1dce4c5604ba9e7" name="gcc48-ada-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="34d20ffb852b82733b4e7f1784ef91213b826552c7408a2b5f1497cf939ce9e2" name="gcc48-ada-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="b57b11af1f2d1ac992c8adf6a20a1d56495239fb94780bc8926136d2dc6534f1" name="gcc48-c++" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="4a6a39406b17ef0e476250cb4c3b9438206f16e61195fb1147caba7d95a8ed28" name="gcc48-c++-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f55d4ca1e5eadd727b050f709b256fea079a3d57ae41f902053e163a41f04256" name="gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="9bfbefe03ae0e1b1c521bf97bfcf1bc79081062bc64278a0b52b6191c6ca95e9" name="gcc48-debugsource" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="71064a760c6d755f535aff525383abe07d6cbfadddd17182265151e1058c8ebc" name="gcc48-fortran" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="1f2ce9ed78a4e8c0d368f8115d501c018adbc6e8eb54df34c57fea66351a4f0f" name="gcc48-fortran-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="b0da62bf723de362d0b4c1eddc77415cd407efbd65a846a03a866fd981378a16" name="gcc48-fortran-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="820912f38f6596afd37db980bd2bdc50e1b99c82f6e648ef55a450d3838a521b" name="gcc48-gij" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="28b58e8a4cbe76fa18db4bb8fac70e599fb88bc41108131f4c991ea9fad5b1cb" name="gcc48-gij-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="b6468fc366901a60f79673439b46bd6c079027bf4f637e7d7f37c7065407386a" name="gcc48-gij-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="bfaf09d70016ccd5c0afe66800461962d4550821ca8426d18b8f48f39a30d6b2" name="gcc48-gij-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="9f987074061217d643a3ea3ee11e2ea45049135e97b3be2a4f4ab614e034c014" name="gcc48-info" arch="noarch">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="5bd7bd70ab12aec3866547dfac67ba890a7a5d2d855679d99637a735c6b7c4ac" name="gcc48-java" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="0b5f74c3de79086d58b212a62236149bed90dca551ddf59b51203c941f18f634" name="gcc48-java-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="2ebc048742668f125159986d566a76b08683b0de62e53fa023300b80132fbfd4" name="gcc48-locale" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c76a8be68bd7a3a98234e4f0d1d5ad3677eaa0cba5e8f91ab355a8aa3a3cc39a" name="gcc48-obj-c++" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f926e672b4d8ec31a9ea7b96c262b62b07e564e0964d6eee03f26b1e1eab234d" name="gcc48-obj-c++-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f1027ec364760996d4d682ca8fc77d4b57dc3f0fe1e43faf8dcdfae74fa9ddea" name="gcc48-objc" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="79544dd163d53cdef575284e4f075b929239469ac660972a0c5cdadf4f231a3d" name="gcc48-objc-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c42fe40ef9214598a6c2f305a9bf6634fa6a987875c61733eb6af2c3be6abbc7" name="gcc48-objc-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="5efdb35f2361cfd2c9e5b2872f6a28ccf802363a61c205f44acb01f11b697c7e" name="gcc48-testresults" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.3"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="3819885083f1036f3d0c10171fa4755113045f495c2d64e87c0fd0546b510df1" name="gcc48-testresults" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.3"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c256a8cbe41a1dc18ff179f89daf5cce18711d4255a5b4b55e50a91a48ac401b" name="gdb" arch="src">
    <version epoch="0" ver="7.9.1" rel="7.1"/>

<changelog author="burnus@net-b.de" date="1391947200">- Merge from fedoras gdb-7.7-1.fc21, a rebase to FSF GDB 7.7.
  The 7.7 features are:
  * For C++, the 'typeid' operator has been added and
    exception catchpoints can be filtered by type.
  * Python scripting has been extended
  * New commands and new command options
  * New convenice variables/functions
  * Some GDB/MI improvements
  * Remote protocal improvments
  * SystemTap SDT probes support AArch64 GNU/Linux
  * Support for Fission DWP file format version 2
  * 'tsave' command supports CTF (Common Trace Format)
  * New script 'gcore'
- Remove now obsolete gdb-aarch64-hw-break.patch
- Remove merged bits from gdb-ppc64le.patch
- Rediff gdb-6.6-buildid-locate-rpm-suse.patch
- Add gdb-fix-attach-signalled-detach-stopped.patch</changelog>
<changelog author="matz@suse.de" date="1392033600">- Use patchlist.pl to merge with gdb-Fedora at
  e86a0cc13a5d91ba95242690237bb77511500897.
- Don't apply patches gdb-rhel5-gcc44.patch,
  gdb-6.6-buildid-locate-rpm-scl.patch,
  gdb-readline62-ask-more-rh.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-rhel5-compat.patch; retained to have same structure as fedoras
  package.
- Add gdb-testsuite-nohostid.patch (from fedora).
- Remove gdb-fix-attach-signalled-detach-stopped.patch again
  (as base not applied), gdb-ppc-ptrace.diff (not applied since some time).</changelog>
<changelog author="matz@suse.de" date="1392206400">- Fix build on s390 (gdb-fix-s390-build.patch).</changelog>
<changelog author="rguenther@suse.com" date="1400068800">- Fix debugging of threaded 31bit inferiors on s390x
  (gdb-7.7-bnc877566.patch).  [bnc#877566]
- Add patchlist.pl and patchname_get.sh as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- For _with_testsuite require gcc-fortran, not gcc-gfortran.
  [bnc#884399]</changelog>
<changelog author="rguenther@suse.com" date="1403784001">- Add baselibs.conf to sources.</changelog>
<changelog author="rguenther@suse.com" date="1404820800">(was: Tue Aug 12 08:13:11 UTC 2014 - rguenther@suse.com)
- Backport all frame-related changes from gdb 7.8.  Adds patches
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch  [bnc#891040]</changelog>
<changelog author="rguenther@suse.com" date="1404993600">(was: Wed Sep 10 07:41:20 UTC 2014 - rguenther@suse.com)
- Backport fix for gdbserver PPC64LE byteorder issue.  [bnc#895831]
  Adds patch gdb-7.7-bnc895831.patch.</changelog>
<changelog author="rguenther@suse.com" date="1405425600">(was: Mon Sep 15 07:42:50 UTC 2014 - rguenther@suse.com)
- Backport fix for gdb internal-error on register info on PPC64LE.
  Addds patch gdb-7.7-bnc896586.patch.  [bnc#896586]</changelog>
<changelog author="rguenther@suse.com" date="1407499200">- Use patchlist.pl to merge with gdb-7.8-16.fc22, a rebase to FSF GDB 7.8.
  The GDB 7.8 features are:
  * Guile scripting support.
  * Python scripting enhancements.
  * New commands:
  * * guile
  * * guile-repl
  * * info auto-load guile-scripts [REGEXP]
  * New options:
  * * maint ada set ignore-descriptive-types (on|off)
  * * maint set target-async (on|off)
  * * set|show auto-load guile-scripts (on|off)
  * * set|show auto-connect-native-target
  * * set|show guile print-stack (none|message|full)
  * * set|show mi-async (on|off)
  * * set|show print symbol-loading (off|brief|full)
  * * set|show record btrace replay-memory-access (read-only|read-write)
  * Remote Protocol:
  * * The qXfer:btrace:read packet supports a new annex 'delta'.
  * GDB/MI:
  * * A new option "-gdb-set mi-async" replaces "-gdb-set target-async".
  * New target configurations:
  * * PowerPC64 GNU/Linux little-endian
  * btrace enhancements:
  * * The btrace record target now supports the 'record goto' command.
  * * The btrace record target supports limited reverse execution and
    replay.
  * ISO C99 variable length automatic arrays support.
  * It is no longer required to "set target-async on" in order to use
    background execution commands (e.g., "c&amp;", "s&amp;", etc.).
  * "catch syscall" now implemented on s390*-linux* targets.
  * The "compare-sections" command now works on all targets.
  * The "target native" command now connects to the native target, and
    can be used to launch native programs, even if "set
    auto-connect-native-target" is set to off.
  * More robust backtraces.  [bnc#891040]
- Obsoletes patch gdb-7.7-bnc877566.patch
- Obsoletes patch gdb-fix-s390-build.patch
- Obsoletes patch gdb-ppc64le.patch
- Drop gdb-ia64-tdep.patch, disable building the IA64 target
- Modifies gdb-6.3-test-pie-20050107.patch,
  gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch,
  gdb-6.6-buildid-locate-core-as-arg.patch,
  gdb-6.6-buildid-locate-rpm.patch, gdb-6.6-buildid-locate.patch,
  gdb-6.6-scheduler_locking-step-is-default.patch,
  gdb-6.6-scheduler_locking-step-sw-watchpoints2.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-archer-pie-addons-keep-disabled.patch, gdb-archer-pie-addons.patch,
  gdb-archer.patch, gdb-attach-fail-reasons-5of5.patch,
  gdb-glibc-strstr-workaround.patch, gdb-rhbz795424-bitpos-20of25.patch,
  gdb-rhbz795424-bitpos-21of25.patch, gdb-rhbz795424-bitpos-22of25.patch,
  gdb-rhbz795424-bitpos-23of25.patch, gdb-rhbz795424-bitpos-25of25.patch,
  gdb-upstream.patch
- Adds gdb-archer-vla-tests.patch, gdb-bz533176-fortran-omp-step.patch,
  gdb-bz541866-rwatch-before-run.patch
  gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch,
  gdb-babeltrace-configure.patch, gdb-btrobust.patch,
  gdb-dts-rhel6-python-compat.patch, gdb-fortran-frame-string.patch,
  gdb-gnat-dwarf-crash-3of3.patch, gdb-python-completer-1of2.patch,
  gdb-python-completer-2of2.patch, gdb-readline-6.3.5.patch,
  gdb-vla-intel-04of23-fix.patch, gdb-vla-intel-stringbt-fix.patch,
  gdb-vla-intel.patch
- Removes gdb-rhel5-gcc44.patch, gdb-6.6-bfd-vdso8k.patch,
  gdb-testsuite-nohostid.patch, gdb-python-stacksmash.patch</changelog>
<changelog author="rguenther@suse.com" date="1407931200">- Enable running the testsuite and store results in a gdb-testresults
  package.
- Add gdb-rpmlintrc to filter errors about the buildroot mentioned
  in testresult logs.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1412942400">- Added gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-2of2.patch and
  gdb-async-stopped-on-pid-arg-testsuite.patch to resolve
  https://sourceware.org/bugzilla/show_bug.cgi?id=17347</changelog>
<changelog author="cshorler@googlemail.com" date="1418644800">- Update for GDB 7.8.1
  * removed (already in upstream):
    gdb-babeltrace-configure.patch
    gdb-async-stopped-on-pid-arg-2of2.patch
  * amended (partially in upstream):
    gdb-archer.patch
    gdb-attach-fail-reasons-5of5.patch
    gdb-async-stopped-on-pid-arg-1of2.patch
    gdb-async-stopped-on-pid-arg-testsuite.patch</changelog>
<changelog author="rguenther@suse.com" date="1424865600">- Use patchlist.pl to merge with gdb-7.9-10.fc22, a rebase to FSF GDB 7.9.
  The GDB 7.8 features are:
  * Python Scripting
  - You can now access frame registers from Python scripts.
  - New attribute 'producer' for gdb.Symtab objects.
  * New Python-based convenience functions:
  - $_caller_is(name [, number_of_frames])
  - $_caller_matches(regexp [, number_of_frames])
  - $_any_caller_is(name [, number_of_frames])
  - $_any_caller_matches(regexp [, number_of_frames])
  * New commands
  - queue-signal signal-name-or-number
    Queue a signal to be delivered to the thread when it is resumed.
  * On resume, GDB now always passes the signal the program had stopped
    for to the thread the signal was sent to, even if the user changed
    threads before resuming.  Previously GDB would often (but not
    always) deliver the signal to the thread that happens to be current
    at resume time.
  * Conversely, the "signal" command now consistently delivers the
    requested signal to the current thread.  GDB now asks for
    confirmation if the program had stopped for a signal and the user
    switched threads meanwhile.
  * "breakpoint always-inserted" modes "off" and "auto" merged.
    Now, when 'breakpoint always-inserted mode' is set to "off", GDB
    won't remove breakpoints from the target until all threads stop,
    even in non-stop mode.  The "auto" mode has been removed, and "off"
    is now the default mode.
  * MI changes
  - The -list-thread-groups command outputs an exit-code field for
    inferiors that have exited.
- removed (upstream) gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-testsuite.patch,
  gdb-python-completer-1of2.patch, gdb-python-completer-2of2.patch
  and gdb-readline-6.3.5.patch
- added gdb-jit-reader-multilib.patch, gdb-no-dg-extract-results-py.patch,
  gdb-python-gil.patch, gdb-python3-py_hash_t-32bit.patch,
  gdb-python3-testsuite.patch and gdb-vla-intel-logical-not.patch</changelog>
<changelog author="rguenther@suse.com" date="1425038400">- Strip date and runtimes from gdb-testsuite contents.</changelog>
<changelog author="schwab@suse.de" date="1425384000">- Build multi-target also on aarch64</changelog>
<changelog author="schwab@suse.de" date="1435579200">- Add guile-devel to enable Scheme scripting support
- Run ada tests also on ppc64 and s390</changelog>
<changelog author="rguenther@suse.com" date="1435838400">- Remove auto-loading non-existent /etc/gdbinit.d/gdb-heap.py
  from /etc/gdbinit</changelog>
<changelog author="matz@suse.de" date="1436529600">- Rebase to gdb version 7.9.1:
  fixes PR python/18299, python/18285.
- Add gdb-s390-reorder-arch.diff [bnc #936050]
- Added patches for fate#318039, s390 z13 support:
  0001-S390-Fix-compiler-invocation-with-compile-command.patch
  0001-S390-Support-new-vector-register-sections.patch
  0001-S390-Add-target-descriptions-for-vector-register-set.patch
  0002-S390-Add-vector-register-support-to-gdb.patch
  0003-S390-Add-vector-register-support-to-gdbserver.patch
  0004-S390-Vector-register-test-case.patch
  0005-S390-Name-invisible-registers-with-the-empty-string-.patch
- Remove now obsolete SLE12-only patches:
  gdb-7.7-bnc896586.patch, gdb-7.7-bnc895831.patch,
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch</changelog>
<changelog author="matz@suse.de" date="1439553600">- Add missing patches from binutils for z13 support. [bnc #936050]</changelog>

</package>
<package pkgid="baab578fc0f62ed4d4198232505a097e6a17766ce2f36ab9fde13997f406a802" name="gdb" arch="x86_64">
    <version epoch="0" ver="7.9.1" rel="7.1"/>

<changelog author="burnus@net-b.de" date="1391947200">- Merge from fedoras gdb-7.7-1.fc21, a rebase to FSF GDB 7.7.
  The 7.7 features are:
  * For C++, the 'typeid' operator has been added and
    exception catchpoints can be filtered by type.
  * Python scripting has been extended
  * New commands and new command options
  * New convenice variables/functions
  * Some GDB/MI improvements
  * Remote protocal improvments
  * SystemTap SDT probes support AArch64 GNU/Linux
  * Support for Fission DWP file format version 2
  * 'tsave' command supports CTF (Common Trace Format)
  * New script 'gcore'
- Remove now obsolete gdb-aarch64-hw-break.patch
- Remove merged bits from gdb-ppc64le.patch
- Rediff gdb-6.6-buildid-locate-rpm-suse.patch
- Add gdb-fix-attach-signalled-detach-stopped.patch</changelog>
<changelog author="matz@suse.de" date="1392033600">- Use patchlist.pl to merge with gdb-Fedora at
  e86a0cc13a5d91ba95242690237bb77511500897.
- Don't apply patches gdb-rhel5-gcc44.patch,
  gdb-6.6-buildid-locate-rpm-scl.patch,
  gdb-readline62-ask-more-rh.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-rhel5-compat.patch; retained to have same structure as fedoras
  package.
- Add gdb-testsuite-nohostid.patch (from fedora).
- Remove gdb-fix-attach-signalled-detach-stopped.patch again
  (as base not applied), gdb-ppc-ptrace.diff (not applied since some time).</changelog>
<changelog author="matz@suse.de" date="1392206400">- Fix build on s390 (gdb-fix-s390-build.patch).</changelog>
<changelog author="rguenther@suse.com" date="1400068800">- Fix debugging of threaded 31bit inferiors on s390x
  (gdb-7.7-bnc877566.patch).  [bnc#877566]
- Add patchlist.pl and patchname_get.sh as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- For _with_testsuite require gcc-fortran, not gcc-gfortran.
  [bnc#884399]</changelog>
<changelog author="rguenther@suse.com" date="1403784001">- Add baselibs.conf to sources.</changelog>
<changelog author="rguenther@suse.com" date="1404820800">(was: Tue Aug 12 08:13:11 UTC 2014 - rguenther@suse.com)
- Backport all frame-related changes from gdb 7.8.  Adds patches
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch  [bnc#891040]</changelog>
<changelog author="rguenther@suse.com" date="1404993600">(was: Wed Sep 10 07:41:20 UTC 2014 - rguenther@suse.com)
- Backport fix for gdbserver PPC64LE byteorder issue.  [bnc#895831]
  Adds patch gdb-7.7-bnc895831.patch.</changelog>
<changelog author="rguenther@suse.com" date="1405425600">(was: Mon Sep 15 07:42:50 UTC 2014 - rguenther@suse.com)
- Backport fix for gdb internal-error on register info on PPC64LE.
  Addds patch gdb-7.7-bnc896586.patch.  [bnc#896586]</changelog>
<changelog author="rguenther@suse.com" date="1407499200">- Use patchlist.pl to merge with gdb-7.8-16.fc22, a rebase to FSF GDB 7.8.
  The GDB 7.8 features are:
  * Guile scripting support.
  * Python scripting enhancements.
  * New commands:
  * * guile
  * * guile-repl
  * * info auto-load guile-scripts [REGEXP]
  * New options:
  * * maint ada set ignore-descriptive-types (on|off)
  * * maint set target-async (on|off)
  * * set|show auto-load guile-scripts (on|off)
  * * set|show auto-connect-native-target
  * * set|show guile print-stack (none|message|full)
  * * set|show mi-async (on|off)
  * * set|show print symbol-loading (off|brief|full)
  * * set|show record btrace replay-memory-access (read-only|read-write)
  * Remote Protocol:
  * * The qXfer:btrace:read packet supports a new annex 'delta'.
  * GDB/MI:
  * * A new option "-gdb-set mi-async" replaces "-gdb-set target-async".
  * New target configurations:
  * * PowerPC64 GNU/Linux little-endian
  * btrace enhancements:
  * * The btrace record target now supports the 'record goto' command.
  * * The btrace record target supports limited reverse execution and
    replay.
  * ISO C99 variable length automatic arrays support.
  * It is no longer required to "set target-async on" in order to use
    background execution commands (e.g., "c&amp;", "s&amp;", etc.).
  * "catch syscall" now implemented on s390*-linux* targets.
  * The "compare-sections" command now works on all targets.
  * The "target native" command now connects to the native target, and
    can be used to launch native programs, even if "set
    auto-connect-native-target" is set to off.
  * More robust backtraces.  [bnc#891040]
- Obsoletes patch gdb-7.7-bnc877566.patch
- Obsoletes patch gdb-fix-s390-build.patch
- Obsoletes patch gdb-ppc64le.patch
- Drop gdb-ia64-tdep.patch, disable building the IA64 target
- Modifies gdb-6.3-test-pie-20050107.patch,
  gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch,
  gdb-6.6-buildid-locate-core-as-arg.patch,
  gdb-6.6-buildid-locate-rpm.patch, gdb-6.6-buildid-locate.patch,
  gdb-6.6-scheduler_locking-step-is-default.patch,
  gdb-6.6-scheduler_locking-step-sw-watchpoints2.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-archer-pie-addons-keep-disabled.patch, gdb-archer-pie-addons.patch,
  gdb-archer.patch, gdb-attach-fail-reasons-5of5.patch,
  gdb-glibc-strstr-workaround.patch, gdb-rhbz795424-bitpos-20of25.patch,
  gdb-rhbz795424-bitpos-21of25.patch, gdb-rhbz795424-bitpos-22of25.patch,
  gdb-rhbz795424-bitpos-23of25.patch, gdb-rhbz795424-bitpos-25of25.patch,
  gdb-upstream.patch
- Adds gdb-archer-vla-tests.patch, gdb-bz533176-fortran-omp-step.patch,
  gdb-bz541866-rwatch-before-run.patch
  gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch,
  gdb-babeltrace-configure.patch, gdb-btrobust.patch,
  gdb-dts-rhel6-python-compat.patch, gdb-fortran-frame-string.patch,
  gdb-gnat-dwarf-crash-3of3.patch, gdb-python-completer-1of2.patch,
  gdb-python-completer-2of2.patch, gdb-readline-6.3.5.patch,
  gdb-vla-intel-04of23-fix.patch, gdb-vla-intel-stringbt-fix.patch,
  gdb-vla-intel.patch
- Removes gdb-rhel5-gcc44.patch, gdb-6.6-bfd-vdso8k.patch,
  gdb-testsuite-nohostid.patch, gdb-python-stacksmash.patch</changelog>
<changelog author="rguenther@suse.com" date="1407931200">- Enable running the testsuite and store results in a gdb-testresults
  package.
- Add gdb-rpmlintrc to filter errors about the buildroot mentioned
  in testresult logs.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1412942400">- Added gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-2of2.patch and
  gdb-async-stopped-on-pid-arg-testsuite.patch to resolve
  https://sourceware.org/bugzilla/show_bug.cgi?id=17347</changelog>
<changelog author="cshorler@googlemail.com" date="1418644800">- Update for GDB 7.8.1
  * removed (already in upstream):
    gdb-babeltrace-configure.patch
    gdb-async-stopped-on-pid-arg-2of2.patch
  * amended (partially in upstream):
    gdb-archer.patch
    gdb-attach-fail-reasons-5of5.patch
    gdb-async-stopped-on-pid-arg-1of2.patch
    gdb-async-stopped-on-pid-arg-testsuite.patch</changelog>
<changelog author="rguenther@suse.com" date="1424865600">- Use patchlist.pl to merge with gdb-7.9-10.fc22, a rebase to FSF GDB 7.9.
  The GDB 7.8 features are:
  * Python Scripting
  - You can now access frame registers from Python scripts.
  - New attribute 'producer' for gdb.Symtab objects.
  * New Python-based convenience functions:
  - $_caller_is(name [, number_of_frames])
  - $_caller_matches(regexp [, number_of_frames])
  - $_any_caller_is(name [, number_of_frames])
  - $_any_caller_matches(regexp [, number_of_frames])
  * New commands
  - queue-signal signal-name-or-number
    Queue a signal to be delivered to the thread when it is resumed.
  * On resume, GDB now always passes the signal the program had stopped
    for to the thread the signal was sent to, even if the user changed
    threads before resuming.  Previously GDB would often (but not
    always) deliver the signal to the thread that happens to be current
    at resume time.
  * Conversely, the "signal" command now consistently delivers the
    requested signal to the current thread.  GDB now asks for
    confirmation if the program had stopped for a signal and the user
    switched threads meanwhile.
  * "breakpoint always-inserted" modes "off" and "auto" merged.
    Now, when 'breakpoint always-inserted mode' is set to "off", GDB
    won't remove breakpoints from the target until all threads stop,
    even in non-stop mode.  The "auto" mode has been removed, and "off"
    is now the default mode.
  * MI changes
  - The -list-thread-groups command outputs an exit-code field for
    inferiors that have exited.
- removed (upstream) gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-testsuite.patch,
  gdb-python-completer-1of2.patch, gdb-python-completer-2of2.patch
  and gdb-readline-6.3.5.patch
- added gdb-jit-reader-multilib.patch, gdb-no-dg-extract-results-py.patch,
  gdb-python-gil.patch, gdb-python3-py_hash_t-32bit.patch,
  gdb-python3-testsuite.patch and gdb-vla-intel-logical-not.patch</changelog>
<changelog author="rguenther@suse.com" date="1425038400">- Strip date and runtimes from gdb-testsuite contents.</changelog>
<changelog author="schwab@suse.de" date="1425384000">- Build multi-target also on aarch64</changelog>
<changelog author="schwab@suse.de" date="1435579200">- Add guile-devel to enable Scheme scripting support
- Run ada tests also on ppc64 and s390</changelog>
<changelog author="rguenther@suse.com" date="1435838400">- Remove auto-loading non-existent /etc/gdbinit.d/gdb-heap.py
  from /etc/gdbinit</changelog>
<changelog author="matz@suse.de" date="1436529600">- Rebase to gdb version 7.9.1:
  fixes PR python/18299, python/18285.
- Add gdb-s390-reorder-arch.diff [bnc #936050]
- Added patches for fate#318039, s390 z13 support:
  0001-S390-Fix-compiler-invocation-with-compile-command.patch
  0001-S390-Support-new-vector-register-sections.patch
  0001-S390-Add-target-descriptions-for-vector-register-set.patch
  0002-S390-Add-vector-register-support-to-gdb.patch
  0003-S390-Add-vector-register-support-to-gdbserver.patch
  0004-S390-Vector-register-test-case.patch
  0005-S390-Name-invisible-registers-with-the-empty-string-.patch
- Remove now obsolete SLE12-only patches:
  gdb-7.7-bnc896586.patch, gdb-7.7-bnc895831.patch,
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch</changelog>
<changelog author="matz@suse.de" date="1439553600">- Add missing patches from binutils for z13 support. [bnc #936050]</changelog>

</package>
<package pkgid="e3e1f6422f5683ae109e134ade0183877d5b27bfb5e350ade80ad020f54e5362" name="gdb-debuginfo" arch="x86_64">
    <version epoch="0" ver="7.9.1" rel="7.1"/>

<changelog author="burnus@net-b.de" date="1391947200">- Merge from fedoras gdb-7.7-1.fc21, a rebase to FSF GDB 7.7.
  The 7.7 features are:
  * For C++, the 'typeid' operator has been added and
    exception catchpoints can be filtered by type.
  * Python scripting has been extended
  * New commands and new command options
  * New convenice variables/functions
  * Some GDB/MI improvements
  * Remote protocal improvments
  * SystemTap SDT probes support AArch64 GNU/Linux
  * Support for Fission DWP file format version 2
  * 'tsave' command supports CTF (Common Trace Format)
  * New script 'gcore'
- Remove now obsolete gdb-aarch64-hw-break.patch
- Remove merged bits from gdb-ppc64le.patch
- Rediff gdb-6.6-buildid-locate-rpm-suse.patch
- Add gdb-fix-attach-signalled-detach-stopped.patch</changelog>
<changelog author="matz@suse.de" date="1392033600">- Use patchlist.pl to merge with gdb-Fedora at
  e86a0cc13a5d91ba95242690237bb77511500897.
- Don't apply patches gdb-rhel5-gcc44.patch,
  gdb-6.6-buildid-locate-rpm-scl.patch,
  gdb-readline62-ask-more-rh.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-rhel5-compat.patch; retained to have same structure as fedoras
  package.
- Add gdb-testsuite-nohostid.patch (from fedora).
- Remove gdb-fix-attach-signalled-detach-stopped.patch again
  (as base not applied), gdb-ppc-ptrace.diff (not applied since some time).</changelog>
<changelog author="matz@suse.de" date="1392206400">- Fix build on s390 (gdb-fix-s390-build.patch).</changelog>
<changelog author="rguenther@suse.com" date="1400068800">- Fix debugging of threaded 31bit inferiors on s390x
  (gdb-7.7-bnc877566.patch).  [bnc#877566]
- Add patchlist.pl and patchname_get.sh as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- For _with_testsuite require gcc-fortran, not gcc-gfortran.
  [bnc#884399]</changelog>
<changelog author="rguenther@suse.com" date="1403784001">- Add baselibs.conf to sources.</changelog>
<changelog author="rguenther@suse.com" date="1404820800">(was: Tue Aug 12 08:13:11 UTC 2014 - rguenther@suse.com)
- Backport all frame-related changes from gdb 7.8.  Adds patches
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch  [bnc#891040]</changelog>
<changelog author="rguenther@suse.com" date="1404993600">(was: Wed Sep 10 07:41:20 UTC 2014 - rguenther@suse.com)
- Backport fix for gdbserver PPC64LE byteorder issue.  [bnc#895831]
  Adds patch gdb-7.7-bnc895831.patch.</changelog>
<changelog author="rguenther@suse.com" date="1405425600">(was: Mon Sep 15 07:42:50 UTC 2014 - rguenther@suse.com)
- Backport fix for gdb internal-error on register info on PPC64LE.
  Addds patch gdb-7.7-bnc896586.patch.  [bnc#896586]</changelog>
<changelog author="rguenther@suse.com" date="1407499200">- Use patchlist.pl to merge with gdb-7.8-16.fc22, a rebase to FSF GDB 7.8.
  The GDB 7.8 features are:
  * Guile scripting support.
  * Python scripting enhancements.
  * New commands:
  * * guile
  * * guile-repl
  * * info auto-load guile-scripts [REGEXP]
  * New options:
  * * maint ada set ignore-descriptive-types (on|off)
  * * maint set target-async (on|off)
  * * set|show auto-load guile-scripts (on|off)
  * * set|show auto-connect-native-target
  * * set|show guile print-stack (none|message|full)
  * * set|show mi-async (on|off)
  * * set|show print symbol-loading (off|brief|full)
  * * set|show record btrace replay-memory-access (read-only|read-write)
  * Remote Protocol:
  * * The qXfer:btrace:read packet supports a new annex 'delta'.
  * GDB/MI:
  * * A new option "-gdb-set mi-async" replaces "-gdb-set target-async".
  * New target configurations:
  * * PowerPC64 GNU/Linux little-endian
  * btrace enhancements:
  * * The btrace record target now supports the 'record goto' command.
  * * The btrace record target supports limited reverse execution and
    replay.
  * ISO C99 variable length automatic arrays support.
  * It is no longer required to "set target-async on" in order to use
    background execution commands (e.g., "c&amp;", "s&amp;", etc.).
  * "catch syscall" now implemented on s390*-linux* targets.
  * The "compare-sections" command now works on all targets.
  * The "target native" command now connects to the native target, and
    can be used to launch native programs, even if "set
    auto-connect-native-target" is set to off.
  * More robust backtraces.  [bnc#891040]
- Obsoletes patch gdb-7.7-bnc877566.patch
- Obsoletes patch gdb-fix-s390-build.patch
- Obsoletes patch gdb-ppc64le.patch
- Drop gdb-ia64-tdep.patch, disable building the IA64 target
- Modifies gdb-6.3-test-pie-20050107.patch,
  gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch,
  gdb-6.6-buildid-locate-core-as-arg.patch,
  gdb-6.6-buildid-locate-rpm.patch, gdb-6.6-buildid-locate.patch,
  gdb-6.6-scheduler_locking-step-is-default.patch,
  gdb-6.6-scheduler_locking-step-sw-watchpoints2.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-archer-pie-addons-keep-disabled.patch, gdb-archer-pie-addons.patch,
  gdb-archer.patch, gdb-attach-fail-reasons-5of5.patch,
  gdb-glibc-strstr-workaround.patch, gdb-rhbz795424-bitpos-20of25.patch,
  gdb-rhbz795424-bitpos-21of25.patch, gdb-rhbz795424-bitpos-22of25.patch,
  gdb-rhbz795424-bitpos-23of25.patch, gdb-rhbz795424-bitpos-25of25.patch,
  gdb-upstream.patch
- Adds gdb-archer-vla-tests.patch, gdb-bz533176-fortran-omp-step.patch,
  gdb-bz541866-rwatch-before-run.patch
  gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch,
  gdb-babeltrace-configure.patch, gdb-btrobust.patch,
  gdb-dts-rhel6-python-compat.patch, gdb-fortran-frame-string.patch,
  gdb-gnat-dwarf-crash-3of3.patch, gdb-python-completer-1of2.patch,
  gdb-python-completer-2of2.patch, gdb-readline-6.3.5.patch,
  gdb-vla-intel-04of23-fix.patch, gdb-vla-intel-stringbt-fix.patch,
  gdb-vla-intel.patch
- Removes gdb-rhel5-gcc44.patch, gdb-6.6-bfd-vdso8k.patch,
  gdb-testsuite-nohostid.patch, gdb-python-stacksmash.patch</changelog>
<changelog author="rguenther@suse.com" date="1407931200">- Enable running the testsuite and store results in a gdb-testresults
  package.
- Add gdb-rpmlintrc to filter errors about the buildroot mentioned
  in testresult logs.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1412942400">- Added gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-2of2.patch and
  gdb-async-stopped-on-pid-arg-testsuite.patch to resolve
  https://sourceware.org/bugzilla/show_bug.cgi?id=17347</changelog>
<changelog author="cshorler@googlemail.com" date="1418644800">- Update for GDB 7.8.1
  * removed (already in upstream):
    gdb-babeltrace-configure.patch
    gdb-async-stopped-on-pid-arg-2of2.patch
  * amended (partially in upstream):
    gdb-archer.patch
    gdb-attach-fail-reasons-5of5.patch
    gdb-async-stopped-on-pid-arg-1of2.patch
    gdb-async-stopped-on-pid-arg-testsuite.patch</changelog>
<changelog author="rguenther@suse.com" date="1424865600">- Use patchlist.pl to merge with gdb-7.9-10.fc22, a rebase to FSF GDB 7.9.
  The GDB 7.8 features are:
  * Python Scripting
  - You can now access frame registers from Python scripts.
  - New attribute 'producer' for gdb.Symtab objects.
  * New Python-based convenience functions:
  - $_caller_is(name [, number_of_frames])
  - $_caller_matches(regexp [, number_of_frames])
  - $_any_caller_is(name [, number_of_frames])
  - $_any_caller_matches(regexp [, number_of_frames])
  * New commands
  - queue-signal signal-name-or-number
    Queue a signal to be delivered to the thread when it is resumed.
  * On resume, GDB now always passes the signal the program had stopped
    for to the thread the signal was sent to, even if the user changed
    threads before resuming.  Previously GDB would often (but not
    always) deliver the signal to the thread that happens to be current
    at resume time.
  * Conversely, the "signal" command now consistently delivers the
    requested signal to the current thread.  GDB now asks for
    confirmation if the program had stopped for a signal and the user
    switched threads meanwhile.
  * "breakpoint always-inserted" modes "off" and "auto" merged.
    Now, when 'breakpoint always-inserted mode' is set to "off", GDB
    won't remove breakpoints from the target until all threads stop,
    even in non-stop mode.  The "auto" mode has been removed, and "off"
    is now the default mode.
  * MI changes
  - The -list-thread-groups command outputs an exit-code field for
    inferiors that have exited.
- removed (upstream) gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-testsuite.patch,
  gdb-python-completer-1of2.patch, gdb-python-completer-2of2.patch
  and gdb-readline-6.3.5.patch
- added gdb-jit-reader-multilib.patch, gdb-no-dg-extract-results-py.patch,
  gdb-python-gil.patch, gdb-python3-py_hash_t-32bit.patch,
  gdb-python3-testsuite.patch and gdb-vla-intel-logical-not.patch</changelog>
<changelog author="rguenther@suse.com" date="1425038400">- Strip date and runtimes from gdb-testsuite contents.</changelog>
<changelog author="schwab@suse.de" date="1425384000">- Build multi-target also on aarch64</changelog>
<changelog author="schwab@suse.de" date="1435579200">- Add guile-devel to enable Scheme scripting support
- Run ada tests also on ppc64 and s390</changelog>
<changelog author="rguenther@suse.com" date="1435838400">- Remove auto-loading non-existent /etc/gdbinit.d/gdb-heap.py
  from /etc/gdbinit</changelog>
<changelog author="matz@suse.de" date="1436529600">- Rebase to gdb version 7.9.1:
  fixes PR python/18299, python/18285.
- Add gdb-s390-reorder-arch.diff [bnc #936050]
- Added patches for fate#318039, s390 z13 support:
  0001-S390-Fix-compiler-invocation-with-compile-command.patch
  0001-S390-Support-new-vector-register-sections.patch
  0001-S390-Add-target-descriptions-for-vector-register-set.patch
  0002-S390-Add-vector-register-support-to-gdb.patch
  0003-S390-Add-vector-register-support-to-gdbserver.patch
  0004-S390-Vector-register-test-case.patch
  0005-S390-Name-invisible-registers-with-the-empty-string-.patch
- Remove now obsolete SLE12-only patches:
  gdb-7.7-bnc896586.patch, gdb-7.7-bnc895831.patch,
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch</changelog>
<changelog author="matz@suse.de" date="1439553600">- Add missing patches from binutils for z13 support. [bnc #936050]</changelog>

</package>
<package pkgid="1943f2a6327594ac293e51dc10dc807f6353469a976bf2d0fed170156f03eeec" name="gdb-debugsource" arch="x86_64">
    <version epoch="0" ver="7.9.1" rel="7.1"/>

<changelog author="burnus@net-b.de" date="1391947200">- Merge from fedoras gdb-7.7-1.fc21, a rebase to FSF GDB 7.7.
  The 7.7 features are:
  * For C++, the 'typeid' operator has been added and
    exception catchpoints can be filtered by type.
  * Python scripting has been extended
  * New commands and new command options
  * New convenice variables/functions
  * Some GDB/MI improvements
  * Remote protocal improvments
  * SystemTap SDT probes support AArch64 GNU/Linux
  * Support for Fission DWP file format version 2
  * 'tsave' command supports CTF (Common Trace Format)
  * New script 'gcore'
- Remove now obsolete gdb-aarch64-hw-break.patch
- Remove merged bits from gdb-ppc64le.patch
- Rediff gdb-6.6-buildid-locate-rpm-suse.patch
- Add gdb-fix-attach-signalled-detach-stopped.patch</changelog>
<changelog author="matz@suse.de" date="1392033600">- Use patchlist.pl to merge with gdb-Fedora at
  e86a0cc13a5d91ba95242690237bb77511500897.
- Don't apply patches gdb-rhel5-gcc44.patch,
  gdb-6.6-buildid-locate-rpm-scl.patch,
  gdb-readline62-ask-more-rh.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-rhel5-compat.patch; retained to have same structure as fedoras
  package.
- Add gdb-testsuite-nohostid.patch (from fedora).
- Remove gdb-fix-attach-signalled-detach-stopped.patch again
  (as base not applied), gdb-ppc-ptrace.diff (not applied since some time).</changelog>
<changelog author="matz@suse.de" date="1392206400">- Fix build on s390 (gdb-fix-s390-build.patch).</changelog>
<changelog author="rguenther@suse.com" date="1400068800">- Fix debugging of threaded 31bit inferiors on s390x
  (gdb-7.7-bnc877566.patch).  [bnc#877566]
- Add patchlist.pl and patchname_get.sh as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- For _with_testsuite require gcc-fortran, not gcc-gfortran.
  [bnc#884399]</changelog>
<changelog author="rguenther@suse.com" date="1403784001">- Add baselibs.conf to sources.</changelog>
<changelog author="rguenther@suse.com" date="1404820800">(was: Tue Aug 12 08:13:11 UTC 2014 - rguenther@suse.com)
- Backport all frame-related changes from gdb 7.8.  Adds patches
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch  [bnc#891040]</changelog>
<changelog author="rguenther@suse.com" date="1404993600">(was: Wed Sep 10 07:41:20 UTC 2014 - rguenther@suse.com)
- Backport fix for gdbserver PPC64LE byteorder issue.  [bnc#895831]
  Adds patch gdb-7.7-bnc895831.patch.</changelog>
<changelog author="rguenther@suse.com" date="1405425600">(was: Mon Sep 15 07:42:50 UTC 2014 - rguenther@suse.com)
- Backport fix for gdb internal-error on register info on PPC64LE.
  Addds patch gdb-7.7-bnc896586.patch.  [bnc#896586]</changelog>
<changelog author="rguenther@suse.com" date="1407499200">- Use patchlist.pl to merge with gdb-7.8-16.fc22, a rebase to FSF GDB 7.8.
  The GDB 7.8 features are:
  * Guile scripting support.
  * Python scripting enhancements.
  * New commands:
  * * guile
  * * guile-repl
  * * info auto-load guile-scripts [REGEXP]
  * New options:
  * * maint ada set ignore-descriptive-types (on|off)
  * * maint set target-async (on|off)
  * * set|show auto-load guile-scripts (on|off)
  * * set|show auto-connect-native-target
  * * set|show guile print-stack (none|message|full)
  * * set|show mi-async (on|off)
  * * set|show print symbol-loading (off|brief|full)
  * * set|show record btrace replay-memory-access (read-only|read-write)
  * Remote Protocol:
  * * The qXfer:btrace:read packet supports a new annex 'delta'.
  * GDB/MI:
  * * A new option "-gdb-set mi-async" replaces "-gdb-set target-async".
  * New target configurations:
  * * PowerPC64 GNU/Linux little-endian
  * btrace enhancements:
  * * The btrace record target now supports the 'record goto' command.
  * * The btrace record target supports limited reverse execution and
    replay.
  * ISO C99 variable length automatic arrays support.
  * It is no longer required to "set target-async on" in order to use
    background execution commands (e.g., "c&amp;", "s&amp;", etc.).
  * "catch syscall" now implemented on s390*-linux* targets.
  * The "compare-sections" command now works on all targets.
  * The "target native" command now connects to the native target, and
    can be used to launch native programs, even if "set
    auto-connect-native-target" is set to off.
  * More robust backtraces.  [bnc#891040]
- Obsoletes patch gdb-7.7-bnc877566.patch
- Obsoletes patch gdb-fix-s390-build.patch
- Obsoletes patch gdb-ppc64le.patch
- Drop gdb-ia64-tdep.patch, disable building the IA64 target
- Modifies gdb-6.3-test-pie-20050107.patch,
  gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch,
  gdb-6.6-buildid-locate-core-as-arg.patch,
  gdb-6.6-buildid-locate-rpm.patch, gdb-6.6-buildid-locate.patch,
  gdb-6.6-scheduler_locking-step-is-default.patch,
  gdb-6.6-scheduler_locking-step-sw-watchpoints2.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-archer-pie-addons-keep-disabled.patch, gdb-archer-pie-addons.patch,
  gdb-archer.patch, gdb-attach-fail-reasons-5of5.patch,
  gdb-glibc-strstr-workaround.patch, gdb-rhbz795424-bitpos-20of25.patch,
  gdb-rhbz795424-bitpos-21of25.patch, gdb-rhbz795424-bitpos-22of25.patch,
  gdb-rhbz795424-bitpos-23of25.patch, gdb-rhbz795424-bitpos-25of25.patch,
  gdb-upstream.patch
- Adds gdb-archer-vla-tests.patch, gdb-bz533176-fortran-omp-step.patch,
  gdb-bz541866-rwatch-before-run.patch
  gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch,
  gdb-babeltrace-configure.patch, gdb-btrobust.patch,
  gdb-dts-rhel6-python-compat.patch, gdb-fortran-frame-string.patch,
  gdb-gnat-dwarf-crash-3of3.patch, gdb-python-completer-1of2.patch,
  gdb-python-completer-2of2.patch, gdb-readline-6.3.5.patch,
  gdb-vla-intel-04of23-fix.patch, gdb-vla-intel-stringbt-fix.patch,
  gdb-vla-intel.patch
- Removes gdb-rhel5-gcc44.patch, gdb-6.6-bfd-vdso8k.patch,
  gdb-testsuite-nohostid.patch, gdb-python-stacksmash.patch</changelog>
<changelog author="rguenther@suse.com" date="1407931200">- Enable running the testsuite and store results in a gdb-testresults
  package.
- Add gdb-rpmlintrc to filter errors about the buildroot mentioned
  in testresult logs.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1412942400">- Added gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-2of2.patch and
  gdb-async-stopped-on-pid-arg-testsuite.patch to resolve
  https://sourceware.org/bugzilla/show_bug.cgi?id=17347</changelog>
<changelog author="cshorler@googlemail.com" date="1418644800">- Update for GDB 7.8.1
  * removed (already in upstream):
    gdb-babeltrace-configure.patch
    gdb-async-stopped-on-pid-arg-2of2.patch
  * amended (partially in upstream):
    gdb-archer.patch
    gdb-attach-fail-reasons-5of5.patch
    gdb-async-stopped-on-pid-arg-1of2.patch
    gdb-async-stopped-on-pid-arg-testsuite.patch</changelog>
<changelog author="rguenther@suse.com" date="1424865600">- Use patchlist.pl to merge with gdb-7.9-10.fc22, a rebase to FSF GDB 7.9.
  The GDB 7.8 features are:
  * Python Scripting
  - You can now access frame registers from Python scripts.
  - New attribute 'producer' for gdb.Symtab objects.
  * New Python-based convenience functions:
  - $_caller_is(name [, number_of_frames])
  - $_caller_matches(regexp [, number_of_frames])
  - $_any_caller_is(name [, number_of_frames])
  - $_any_caller_matches(regexp [, number_of_frames])
  * New commands
  - queue-signal signal-name-or-number
    Queue a signal to be delivered to the thread when it is resumed.
  * On resume, GDB now always passes the signal the program had stopped
    for to the thread the signal was sent to, even if the user changed
    threads before resuming.  Previously GDB would often (but not
    always) deliver the signal to the thread that happens to be current
    at resume time.
  * Conversely, the "signal" command now consistently delivers the
    requested signal to the current thread.  GDB now asks for
    confirmation if the program had stopped for a signal and the user
    switched threads meanwhile.
  * "breakpoint always-inserted" modes "off" and "auto" merged.
    Now, when 'breakpoint always-inserted mode' is set to "off", GDB
    won't remove breakpoints from the target until all threads stop,
    even in non-stop mode.  The "auto" mode has been removed, and "off"
    is now the default mode.
  * MI changes
  - The -list-thread-groups command outputs an exit-code field for
    inferiors that have exited.
- removed (upstream) gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-testsuite.patch,
  gdb-python-completer-1of2.patch, gdb-python-completer-2of2.patch
  and gdb-readline-6.3.5.patch
- added gdb-jit-reader-multilib.patch, gdb-no-dg-extract-results-py.patch,
  gdb-python-gil.patch, gdb-python3-py_hash_t-32bit.patch,
  gdb-python3-testsuite.patch and gdb-vla-intel-logical-not.patch</changelog>
<changelog author="rguenther@suse.com" date="1425038400">- Strip date and runtimes from gdb-testsuite contents.</changelog>
<changelog author="schwab@suse.de" date="1425384000">- Build multi-target also on aarch64</changelog>
<changelog author="schwab@suse.de" date="1435579200">- Add guile-devel to enable Scheme scripting support
- Run ada tests also on ppc64 and s390</changelog>
<changelog author="rguenther@suse.com" date="1435838400">- Remove auto-loading non-existent /etc/gdbinit.d/gdb-heap.py
  from /etc/gdbinit</changelog>
<changelog author="matz@suse.de" date="1436529600">- Rebase to gdb version 7.9.1:
  fixes PR python/18299, python/18285.
- Add gdb-s390-reorder-arch.diff [bnc #936050]
- Added patches for fate#318039, s390 z13 support:
  0001-S390-Fix-compiler-invocation-with-compile-command.patch
  0001-S390-Support-new-vector-register-sections.patch
  0001-S390-Add-target-descriptions-for-vector-register-set.patch
  0002-S390-Add-vector-register-support-to-gdb.patch
  0003-S390-Add-vector-register-support-to-gdbserver.patch
  0004-S390-Vector-register-test-case.patch
  0005-S390-Name-invisible-registers-with-the-empty-string-.patch
- Remove now obsolete SLE12-only patches:
  gdb-7.7-bnc896586.patch, gdb-7.7-bnc895831.patch,
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch</changelog>
<changelog author="matz@suse.de" date="1439553600">- Add missing patches from binutils for z13 support. [bnc #936050]</changelog>

</package>
<package pkgid="7b0133078742510223797f6d2fad3be2a6412c2631371d67407aee1243bafefa" name="gdb-testresults" arch="x86_64">
    <version epoch="0" ver="7.9.1" rel="7.1"/>

<changelog author="burnus@net-b.de" date="1391947200">- Merge from fedoras gdb-7.7-1.fc21, a rebase to FSF GDB 7.7.
  The 7.7 features are:
  * For C++, the 'typeid' operator has been added and
    exception catchpoints can be filtered by type.
  * Python scripting has been extended
  * New commands and new command options
  * New convenice variables/functions
  * Some GDB/MI improvements
  * Remote protocal improvments
  * SystemTap SDT probes support AArch64 GNU/Linux
  * Support for Fission DWP file format version 2
  * 'tsave' command supports CTF (Common Trace Format)
  * New script 'gcore'
- Remove now obsolete gdb-aarch64-hw-break.patch
- Remove merged bits from gdb-ppc64le.patch
- Rediff gdb-6.6-buildid-locate-rpm-suse.patch
- Add gdb-fix-attach-signalled-detach-stopped.patch</changelog>
<changelog author="matz@suse.de" date="1392033600">- Use patchlist.pl to merge with gdb-Fedora at
  e86a0cc13a5d91ba95242690237bb77511500897.
- Don't apply patches gdb-rhel5-gcc44.patch,
  gdb-6.6-buildid-locate-rpm-scl.patch,
  gdb-readline62-ask-more-rh.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-rhel5-compat.patch; retained to have same structure as fedoras
  package.
- Add gdb-testsuite-nohostid.patch (from fedora).
- Remove gdb-fix-attach-signalled-detach-stopped.patch again
  (as base not applied), gdb-ppc-ptrace.diff (not applied since some time).</changelog>
<changelog author="matz@suse.de" date="1392206400">- Fix build on s390 (gdb-fix-s390-build.patch).</changelog>
<changelog author="rguenther@suse.com" date="1400068800">- Fix debugging of threaded 31bit inferiors on s390x
  (gdb-7.7-bnc877566.patch).  [bnc#877566]
- Add patchlist.pl and patchname_get.sh as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- For _with_testsuite require gcc-fortran, not gcc-gfortran.
  [bnc#884399]</changelog>
<changelog author="rguenther@suse.com" date="1403784001">- Add baselibs.conf to sources.</changelog>
<changelog author="rguenther@suse.com" date="1404820800">(was: Tue Aug 12 08:13:11 UTC 2014 - rguenther@suse.com)
- Backport all frame-related changes from gdb 7.8.  Adds patches
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch  [bnc#891040]</changelog>
<changelog author="rguenther@suse.com" date="1404993600">(was: Wed Sep 10 07:41:20 UTC 2014 - rguenther@suse.com)
- Backport fix for gdbserver PPC64LE byteorder issue.  [bnc#895831]
  Adds patch gdb-7.7-bnc895831.patch.</changelog>
<changelog author="rguenther@suse.com" date="1405425600">(was: Mon Sep 15 07:42:50 UTC 2014 - rguenther@suse.com)
- Backport fix for gdb internal-error on register info on PPC64LE.
  Addds patch gdb-7.7-bnc896586.patch.  [bnc#896586]</changelog>
<changelog author="rguenther@suse.com" date="1407499200">- Use patchlist.pl to merge with gdb-7.8-16.fc22, a rebase to FSF GDB 7.8.
  The GDB 7.8 features are:
  * Guile scripting support.
  * Python scripting enhancements.
  * New commands:
  * * guile
  * * guile-repl
  * * info auto-load guile-scripts [REGEXP]
  * New options:
  * * maint ada set ignore-descriptive-types (on|off)
  * * maint set target-async (on|off)
  * * set|show auto-load guile-scripts (on|off)
  * * set|show auto-connect-native-target
  * * set|show guile print-stack (none|message|full)
  * * set|show mi-async (on|off)
  * * set|show print symbol-loading (off|brief|full)
  * * set|show record btrace replay-memory-access (read-only|read-write)
  * Remote Protocol:
  * * The qXfer:btrace:read packet supports a new annex 'delta'.
  * GDB/MI:
  * * A new option "-gdb-set mi-async" replaces "-gdb-set target-async".
  * New target configurations:
  * * PowerPC64 GNU/Linux little-endian
  * btrace enhancements:
  * * The btrace record target now supports the 'record goto' command.
  * * The btrace record target supports limited reverse execution and
    replay.
  * ISO C99 variable length automatic arrays support.
  * It is no longer required to "set target-async on" in order to use
    background execution commands (e.g., "c&amp;", "s&amp;", etc.).
  * "catch syscall" now implemented on s390*-linux* targets.
  * The "compare-sections" command now works on all targets.
  * The "target native" command now connects to the native target, and
    can be used to launch native programs, even if "set
    auto-connect-native-target" is set to off.
  * More robust backtraces.  [bnc#891040]
- Obsoletes patch gdb-7.7-bnc877566.patch
- Obsoletes patch gdb-fix-s390-build.patch
- Obsoletes patch gdb-ppc64le.patch
- Drop gdb-ia64-tdep.patch, disable building the IA64 target
- Modifies gdb-6.3-test-pie-20050107.patch,
  gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch,
  gdb-6.6-buildid-locate-core-as-arg.patch,
  gdb-6.6-buildid-locate-rpm.patch, gdb-6.6-buildid-locate.patch,
  gdb-6.6-scheduler_locking-step-is-default.patch,
  gdb-6.6-scheduler_locking-step-sw-watchpoints2.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-archer-pie-addons-keep-disabled.patch, gdb-archer-pie-addons.patch,
  gdb-archer.patch, gdb-attach-fail-reasons-5of5.patch,
  gdb-glibc-strstr-workaround.patch, gdb-rhbz795424-bitpos-20of25.patch,
  gdb-rhbz795424-bitpos-21of25.patch, gdb-rhbz795424-bitpos-22of25.patch,
  gdb-rhbz795424-bitpos-23of25.patch, gdb-rhbz795424-bitpos-25of25.patch,
  gdb-upstream.patch
- Adds gdb-archer-vla-tests.patch, gdb-bz533176-fortran-omp-step.patch,
  gdb-bz541866-rwatch-before-run.patch
  gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch,
  gdb-babeltrace-configure.patch, gdb-btrobust.patch,
  gdb-dts-rhel6-python-compat.patch, gdb-fortran-frame-string.patch,
  gdb-gnat-dwarf-crash-3of3.patch, gdb-python-completer-1of2.patch,
  gdb-python-completer-2of2.patch, gdb-readline-6.3.5.patch,
  gdb-vla-intel-04of23-fix.patch, gdb-vla-intel-stringbt-fix.patch,
  gdb-vla-intel.patch
- Removes gdb-rhel5-gcc44.patch, gdb-6.6-bfd-vdso8k.patch,
  gdb-testsuite-nohostid.patch, gdb-python-stacksmash.patch</changelog>
<changelog author="rguenther@suse.com" date="1407931200">- Enable running the testsuite and store results in a gdb-testresults
  package.
- Add gdb-rpmlintrc to filter errors about the buildroot mentioned
  in testresult logs.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1412942400">- Added gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-2of2.patch and
  gdb-async-stopped-on-pid-arg-testsuite.patch to resolve
  https://sourceware.org/bugzilla/show_bug.cgi?id=17347</changelog>
<changelog author="cshorler@googlemail.com" date="1418644800">- Update for GDB 7.8.1
  * removed (already in upstream):
    gdb-babeltrace-configure.patch
    gdb-async-stopped-on-pid-arg-2of2.patch
  * amended (partially in upstream):
    gdb-archer.patch
    gdb-attach-fail-reasons-5of5.patch
    gdb-async-stopped-on-pid-arg-1of2.patch
    gdb-async-stopped-on-pid-arg-testsuite.patch</changelog>
<changelog author="rguenther@suse.com" date="1424865600">- Use patchlist.pl to merge with gdb-7.9-10.fc22, a rebase to FSF GDB 7.9.
  The GDB 7.8 features are:
  * Python Scripting
  - You can now access frame registers from Python scripts.
  - New attribute 'producer' for gdb.Symtab objects.
  * New Python-based convenience functions:
  - $_caller_is(name [, number_of_frames])
  - $_caller_matches(regexp [, number_of_frames])
  - $_any_caller_is(name [, number_of_frames])
  - $_any_caller_matches(regexp [, number_of_frames])
  * New commands
  - queue-signal signal-name-or-number
    Queue a signal to be delivered to the thread when it is resumed.
  * On resume, GDB now always passes the signal the program had stopped
    for to the thread the signal was sent to, even if the user changed
    threads before resuming.  Previously GDB would often (but not
    always) deliver the signal to the thread that happens to be current
    at resume time.
  * Conversely, the "signal" command now consistently delivers the
    requested signal to the current thread.  GDB now asks for
    confirmation if the program had stopped for a signal and the user
    switched threads meanwhile.
  * "breakpoint always-inserted" modes "off" and "auto" merged.
    Now, when 'breakpoint always-inserted mode' is set to "off", GDB
    won't remove breakpoints from the target until all threads stop,
    even in non-stop mode.  The "auto" mode has been removed, and "off"
    is now the default mode.
  * MI changes
  - The -list-thread-groups command outputs an exit-code field for
    inferiors that have exited.
- removed (upstream) gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-testsuite.patch,
  gdb-python-completer-1of2.patch, gdb-python-completer-2of2.patch
  and gdb-readline-6.3.5.patch
- added gdb-jit-reader-multilib.patch, gdb-no-dg-extract-results-py.patch,
  gdb-python-gil.patch, gdb-python3-py_hash_t-32bit.patch,
  gdb-python3-testsuite.patch and gdb-vla-intel-logical-not.patch</changelog>
<changelog author="rguenther@suse.com" date="1425038400">- Strip date and runtimes from gdb-testsuite contents.</changelog>
<changelog author="schwab@suse.de" date="1425384000">- Build multi-target also on aarch64</changelog>
<changelog author="schwab@suse.de" date="1435579200">- Add guile-devel to enable Scheme scripting support
- Run ada tests also on ppc64 and s390</changelog>
<changelog author="rguenther@suse.com" date="1435838400">- Remove auto-loading non-existent /etc/gdbinit.d/gdb-heap.py
  from /etc/gdbinit</changelog>
<changelog author="matz@suse.de" date="1436529600">- Rebase to gdb version 7.9.1:
  fixes PR python/18299, python/18285.
- Add gdb-s390-reorder-arch.diff [bnc #936050]
- Added patches for fate#318039, s390 z13 support:
  0001-S390-Fix-compiler-invocation-with-compile-command.patch
  0001-S390-Support-new-vector-register-sections.patch
  0001-S390-Add-target-descriptions-for-vector-register-set.patch
  0002-S390-Add-vector-register-support-to-gdb.patch
  0003-S390-Add-vector-register-support-to-gdbserver.patch
  0004-S390-Vector-register-test-case.patch
  0005-S390-Name-invisible-registers-with-the-empty-string-.patch
- Remove now obsolete SLE12-only patches:
  gdb-7.7-bnc896586.patch, gdb-7.7-bnc895831.patch,
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch</changelog>
<changelog author="matz@suse.de" date="1439553600">- Add missing patches from binutils for z13 support. [bnc #936050]</changelog>

</package>
<package pkgid="6656c4084ecc22225849f18a176143c298ad41707425d1f2d461bc2919934eb0" name="gdbserver" arch="x86_64">
    <version epoch="0" ver="7.9.1" rel="7.1"/>

<changelog author="burnus@net-b.de" date="1391947200">- Merge from fedoras gdb-7.7-1.fc21, a rebase to FSF GDB 7.7.
  The 7.7 features are:
  * For C++, the 'typeid' operator has been added and
    exception catchpoints can be filtered by type.
  * Python scripting has been extended
  * New commands and new command options
  * New convenice variables/functions
  * Some GDB/MI improvements
  * Remote protocal improvments
  * SystemTap SDT probes support AArch64 GNU/Linux
  * Support for Fission DWP file format version 2
  * 'tsave' command supports CTF (Common Trace Format)
  * New script 'gcore'
- Remove now obsolete gdb-aarch64-hw-break.patch
- Remove merged bits from gdb-ppc64le.patch
- Rediff gdb-6.6-buildid-locate-rpm-suse.patch
- Add gdb-fix-attach-signalled-detach-stopped.patch</changelog>
<changelog author="matz@suse.de" date="1392033600">- Use patchlist.pl to merge with gdb-Fedora at
  e86a0cc13a5d91ba95242690237bb77511500897.
- Don't apply patches gdb-rhel5-gcc44.patch,
  gdb-6.6-buildid-locate-rpm-scl.patch,
  gdb-readline62-ask-more-rh.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-rhel5-compat.patch; retained to have same structure as fedoras
  package.
- Add gdb-testsuite-nohostid.patch (from fedora).
- Remove gdb-fix-attach-signalled-detach-stopped.patch again
  (as base not applied), gdb-ppc-ptrace.diff (not applied since some time).</changelog>
<changelog author="matz@suse.de" date="1392206400">- Fix build on s390 (gdb-fix-s390-build.patch).</changelog>
<changelog author="rguenther@suse.com" date="1400068800">- Fix debugging of threaded 31bit inferiors on s390x
  (gdb-7.7-bnc877566.patch).  [bnc#877566]
- Add patchlist.pl and patchname_get.sh as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- For _with_testsuite require gcc-fortran, not gcc-gfortran.
  [bnc#884399]</changelog>
<changelog author="rguenther@suse.com" date="1403784001">- Add baselibs.conf to sources.</changelog>
<changelog author="rguenther@suse.com" date="1404820800">(was: Tue Aug 12 08:13:11 UTC 2014 - rguenther@suse.com)
- Backport all frame-related changes from gdb 7.8.  Adds patches
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch  [bnc#891040]</changelog>
<changelog author="rguenther@suse.com" date="1404993600">(was: Wed Sep 10 07:41:20 UTC 2014 - rguenther@suse.com)
- Backport fix for gdbserver PPC64LE byteorder issue.  [bnc#895831]
  Adds patch gdb-7.7-bnc895831.patch.</changelog>
<changelog author="rguenther@suse.com" date="1405425600">(was: Mon Sep 15 07:42:50 UTC 2014 - rguenther@suse.com)
- Backport fix for gdb internal-error on register info on PPC64LE.
  Addds patch gdb-7.7-bnc896586.patch.  [bnc#896586]</changelog>
<changelog author="rguenther@suse.com" date="1407499200">- Use patchlist.pl to merge with gdb-7.8-16.fc22, a rebase to FSF GDB 7.8.
  The GDB 7.8 features are:
  * Guile scripting support.
  * Python scripting enhancements.
  * New commands:
  * * guile
  * * guile-repl
  * * info auto-load guile-scripts [REGEXP]
  * New options:
  * * maint ada set ignore-descriptive-types (on|off)
  * * maint set target-async (on|off)
  * * set|show auto-load guile-scripts (on|off)
  * * set|show auto-connect-native-target
  * * set|show guile print-stack (none|message|full)
  * * set|show mi-async (on|off)
  * * set|show print symbol-loading (off|brief|full)
  * * set|show record btrace replay-memory-access (read-only|read-write)
  * Remote Protocol:
  * * The qXfer:btrace:read packet supports a new annex 'delta'.
  * GDB/MI:
  * * A new option "-gdb-set mi-async" replaces "-gdb-set target-async".
  * New target configurations:
  * * PowerPC64 GNU/Linux little-endian
  * btrace enhancements:
  * * The btrace record target now supports the 'record goto' command.
  * * The btrace record target supports limited reverse execution and
    replay.
  * ISO C99 variable length automatic arrays support.
  * It is no longer required to "set target-async on" in order to use
    background execution commands (e.g., "c&amp;", "s&amp;", etc.).
  * "catch syscall" now implemented on s390*-linux* targets.
  * The "compare-sections" command now works on all targets.
  * The "target native" command now connects to the native target, and
    can be used to launch native programs, even if "set
    auto-connect-native-target" is set to off.
  * More robust backtraces.  [bnc#891040]
- Obsoletes patch gdb-7.7-bnc877566.patch
- Obsoletes patch gdb-fix-s390-build.patch
- Obsoletes patch gdb-ppc64le.patch
- Drop gdb-ia64-tdep.patch, disable building the IA64 target
- Modifies gdb-6.3-test-pie-20050107.patch,
  gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch,
  gdb-6.6-buildid-locate-core-as-arg.patch,
  gdb-6.6-buildid-locate-rpm.patch, gdb-6.6-buildid-locate.patch,
  gdb-6.6-scheduler_locking-step-is-default.patch,
  gdb-6.6-scheduler_locking-step-sw-watchpoints2.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-archer-pie-addons-keep-disabled.patch, gdb-archer-pie-addons.patch,
  gdb-archer.patch, gdb-attach-fail-reasons-5of5.patch,
  gdb-glibc-strstr-workaround.patch, gdb-rhbz795424-bitpos-20of25.patch,
  gdb-rhbz795424-bitpos-21of25.patch, gdb-rhbz795424-bitpos-22of25.patch,
  gdb-rhbz795424-bitpos-23of25.patch, gdb-rhbz795424-bitpos-25of25.patch,
  gdb-upstream.patch
- Adds gdb-archer-vla-tests.patch, gdb-bz533176-fortran-omp-step.patch,
  gdb-bz541866-rwatch-before-run.patch
  gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch,
  gdb-babeltrace-configure.patch, gdb-btrobust.patch,
  gdb-dts-rhel6-python-compat.patch, gdb-fortran-frame-string.patch,
  gdb-gnat-dwarf-crash-3of3.patch, gdb-python-completer-1of2.patch,
  gdb-python-completer-2of2.patch, gdb-readline-6.3.5.patch,
  gdb-vla-intel-04of23-fix.patch, gdb-vla-intel-stringbt-fix.patch,
  gdb-vla-intel.patch
- Removes gdb-rhel5-gcc44.patch, gdb-6.6-bfd-vdso8k.patch,
  gdb-testsuite-nohostid.patch, gdb-python-stacksmash.patch</changelog>
<changelog author="rguenther@suse.com" date="1407931200">- Enable running the testsuite and store results in a gdb-testresults
  package.
- Add gdb-rpmlintrc to filter errors about the buildroot mentioned
  in testresult logs.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1412942400">- Added gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-2of2.patch and
  gdb-async-stopped-on-pid-arg-testsuite.patch to resolve
  https://sourceware.org/bugzilla/show_bug.cgi?id=17347</changelog>
<changelog author="cshorler@googlemail.com" date="1418644800">- Update for GDB 7.8.1
  * removed (already in upstream):
    gdb-babeltrace-configure.patch
    gdb-async-stopped-on-pid-arg-2of2.patch
  * amended (partially in upstream):
    gdb-archer.patch
    gdb-attach-fail-reasons-5of5.patch
    gdb-async-stopped-on-pid-arg-1of2.patch
    gdb-async-stopped-on-pid-arg-testsuite.patch</changelog>
<changelog author="rguenther@suse.com" date="1424865600">- Use patchlist.pl to merge with gdb-7.9-10.fc22, a rebase to FSF GDB 7.9.
  The GDB 7.8 features are:
  * Python Scripting
  - You can now access frame registers from Python scripts.
  - New attribute 'producer' for gdb.Symtab objects.
  * New Python-based convenience functions:
  - $_caller_is(name [, number_of_frames])
  - $_caller_matches(regexp [, number_of_frames])
  - $_any_caller_is(name [, number_of_frames])
  - $_any_caller_matches(regexp [, number_of_frames])
  * New commands
  - queue-signal signal-name-or-number
    Queue a signal to be delivered to the thread when it is resumed.
  * On resume, GDB now always passes the signal the program had stopped
    for to the thread the signal was sent to, even if the user changed
    threads before resuming.  Previously GDB would often (but not
    always) deliver the signal to the thread that happens to be current
    at resume time.
  * Conversely, the "signal" command now consistently delivers the
    requested signal to the current thread.  GDB now asks for
    confirmation if the program had stopped for a signal and the user
    switched threads meanwhile.
  * "breakpoint always-inserted" modes "off" and "auto" merged.
    Now, when 'breakpoint always-inserted mode' is set to "off", GDB
    won't remove breakpoints from the target until all threads stop,
    even in non-stop mode.  The "auto" mode has been removed, and "off"
    is now the default mode.
  * MI changes
  - The -list-thread-groups command outputs an exit-code field for
    inferiors that have exited.
- removed (upstream) gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-testsuite.patch,
  gdb-python-completer-1of2.patch, gdb-python-completer-2of2.patch
  and gdb-readline-6.3.5.patch
- added gdb-jit-reader-multilib.patch, gdb-no-dg-extract-results-py.patch,
  gdb-python-gil.patch, gdb-python3-py_hash_t-32bit.patch,
  gdb-python3-testsuite.patch and gdb-vla-intel-logical-not.patch</changelog>
<changelog author="rguenther@suse.com" date="1425038400">- Strip date and runtimes from gdb-testsuite contents.</changelog>
<changelog author="schwab@suse.de" date="1425384000">- Build multi-target also on aarch64</changelog>
<changelog author="schwab@suse.de" date="1435579200">- Add guile-devel to enable Scheme scripting support
- Run ada tests also on ppc64 and s390</changelog>
<changelog author="rguenther@suse.com" date="1435838400">- Remove auto-loading non-existent /etc/gdbinit.d/gdb-heap.py
  from /etc/gdbinit</changelog>
<changelog author="matz@suse.de" date="1436529600">- Rebase to gdb version 7.9.1:
  fixes PR python/18299, python/18285.
- Add gdb-s390-reorder-arch.diff [bnc #936050]
- Added patches for fate#318039, s390 z13 support:
  0001-S390-Fix-compiler-invocation-with-compile-command.patch
  0001-S390-Support-new-vector-register-sections.patch
  0001-S390-Add-target-descriptions-for-vector-register-set.patch
  0002-S390-Add-vector-register-support-to-gdb.patch
  0003-S390-Add-vector-register-support-to-gdbserver.patch
  0004-S390-Vector-register-test-case.patch
  0005-S390-Name-invisible-registers-with-the-empty-string-.patch
- Remove now obsolete SLE12-only patches:
  gdb-7.7-bnc896586.patch, gdb-7.7-bnc895831.patch,
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch</changelog>
<changelog author="matz@suse.de" date="1439553600">- Add missing patches from binutils for z13 support. [bnc #936050]</changelog>

</package>
<package pkgid="9f52044ff1477e271282207dbab83dcc355463f3b5648a4193b44fc60ae60871" name="gdbserver-debuginfo" arch="x86_64">
    <version epoch="0" ver="7.9.1" rel="7.1"/>

<changelog author="burnus@net-b.de" date="1391947200">- Merge from fedoras gdb-7.7-1.fc21, a rebase to FSF GDB 7.7.
  The 7.7 features are:
  * For C++, the 'typeid' operator has been added and
    exception catchpoints can be filtered by type.
  * Python scripting has been extended
  * New commands and new command options
  * New convenice variables/functions
  * Some GDB/MI improvements
  * Remote protocal improvments
  * SystemTap SDT probes support AArch64 GNU/Linux
  * Support for Fission DWP file format version 2
  * 'tsave' command supports CTF (Common Trace Format)
  * New script 'gcore'
- Remove now obsolete gdb-aarch64-hw-break.patch
- Remove merged bits from gdb-ppc64le.patch
- Rediff gdb-6.6-buildid-locate-rpm-suse.patch
- Add gdb-fix-attach-signalled-detach-stopped.patch</changelog>
<changelog author="matz@suse.de" date="1392033600">- Use patchlist.pl to merge with gdb-Fedora at
  e86a0cc13a5d91ba95242690237bb77511500897.
- Don't apply patches gdb-rhel5-gcc44.patch,
  gdb-6.6-buildid-locate-rpm-scl.patch,
  gdb-readline62-ask-more-rh.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-rhel5-compat.patch; retained to have same structure as fedoras
  package.
- Add gdb-testsuite-nohostid.patch (from fedora).
- Remove gdb-fix-attach-signalled-detach-stopped.patch again
  (as base not applied), gdb-ppc-ptrace.diff (not applied since some time).</changelog>
<changelog author="matz@suse.de" date="1392206400">- Fix build on s390 (gdb-fix-s390-build.patch).</changelog>
<changelog author="rguenther@suse.com" date="1400068800">- Fix debugging of threaded 31bit inferiors on s390x
  (gdb-7.7-bnc877566.patch).  [bnc#877566]
- Add patchlist.pl and patchname_get.sh as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- For _with_testsuite require gcc-fortran, not gcc-gfortran.
  [bnc#884399]</changelog>
<changelog author="rguenther@suse.com" date="1403784001">- Add baselibs.conf to sources.</changelog>
<changelog author="rguenther@suse.com" date="1404820800">(was: Tue Aug 12 08:13:11 UTC 2014 - rguenther@suse.com)
- Backport all frame-related changes from gdb 7.8.  Adds patches
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch  [bnc#891040]</changelog>
<changelog author="rguenther@suse.com" date="1404993600">(was: Wed Sep 10 07:41:20 UTC 2014 - rguenther@suse.com)
- Backport fix for gdbserver PPC64LE byteorder issue.  [bnc#895831]
  Adds patch gdb-7.7-bnc895831.patch.</changelog>
<changelog author="rguenther@suse.com" date="1405425600">(was: Mon Sep 15 07:42:50 UTC 2014 - rguenther@suse.com)
- Backport fix for gdb internal-error on register info on PPC64LE.
  Addds patch gdb-7.7-bnc896586.patch.  [bnc#896586]</changelog>
<changelog author="rguenther@suse.com" date="1407499200">- Use patchlist.pl to merge with gdb-7.8-16.fc22, a rebase to FSF GDB 7.8.
  The GDB 7.8 features are:
  * Guile scripting support.
  * Python scripting enhancements.
  * New commands:
  * * guile
  * * guile-repl
  * * info auto-load guile-scripts [REGEXP]
  * New options:
  * * maint ada set ignore-descriptive-types (on|off)
  * * maint set target-async (on|off)
  * * set|show auto-load guile-scripts (on|off)
  * * set|show auto-connect-native-target
  * * set|show guile print-stack (none|message|full)
  * * set|show mi-async (on|off)
  * * set|show print symbol-loading (off|brief|full)
  * * set|show record btrace replay-memory-access (read-only|read-write)
  * Remote Protocol:
  * * The qXfer:btrace:read packet supports a new annex 'delta'.
  * GDB/MI:
  * * A new option "-gdb-set mi-async" replaces "-gdb-set target-async".
  * New target configurations:
  * * PowerPC64 GNU/Linux little-endian
  * btrace enhancements:
  * * The btrace record target now supports the 'record goto' command.
  * * The btrace record target supports limited reverse execution and
    replay.
  * ISO C99 variable length automatic arrays support.
  * It is no longer required to "set target-async on" in order to use
    background execution commands (e.g., "c&amp;", "s&amp;", etc.).
  * "catch syscall" now implemented on s390*-linux* targets.
  * The "compare-sections" command now works on all targets.
  * The "target native" command now connects to the native target, and
    can be used to launch native programs, even if "set
    auto-connect-native-target" is set to off.
  * More robust backtraces.  [bnc#891040]
- Obsoletes patch gdb-7.7-bnc877566.patch
- Obsoletes patch gdb-fix-s390-build.patch
- Obsoletes patch gdb-ppc64le.patch
- Drop gdb-ia64-tdep.patch, disable building the IA64 target
- Modifies gdb-6.3-test-pie-20050107.patch,
  gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch,
  gdb-6.6-buildid-locate-core-as-arg.patch,
  gdb-6.6-buildid-locate-rpm.patch, gdb-6.6-buildid-locate.patch,
  gdb-6.6-scheduler_locking-step-is-default.patch,
  gdb-6.6-scheduler_locking-step-sw-watchpoints2.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-6.8-quit-never-aborts.patch,
  gdb-archer-pie-addons-keep-disabled.patch, gdb-archer-pie-addons.patch,
  gdb-archer.patch, gdb-attach-fail-reasons-5of5.patch,
  gdb-glibc-strstr-workaround.patch, gdb-rhbz795424-bitpos-20of25.patch,
  gdb-rhbz795424-bitpos-21of25.patch, gdb-rhbz795424-bitpos-22of25.patch,
  gdb-rhbz795424-bitpos-23of25.patch, gdb-rhbz795424-bitpos-25of25.patch,
  gdb-upstream.patch
- Adds gdb-archer-vla-tests.patch, gdb-bz533176-fortran-omp-step.patch,
  gdb-bz541866-rwatch-before-run.patch
  gdb-6.6-buildid-locate-misleading-warning-missing-debuginfo-rhbz981154.patch,
  gdb-babeltrace-configure.patch, gdb-btrobust.patch,
  gdb-dts-rhel6-python-compat.patch, gdb-fortran-frame-string.patch,
  gdb-gnat-dwarf-crash-3of3.patch, gdb-python-completer-1of2.patch,
  gdb-python-completer-2of2.patch, gdb-readline-6.3.5.patch,
  gdb-vla-intel-04of23-fix.patch, gdb-vla-intel-stringbt-fix.patch,
  gdb-vla-intel.patch
- Removes gdb-rhel5-gcc44.patch, gdb-6.6-bfd-vdso8k.patch,
  gdb-testsuite-nohostid.patch, gdb-python-stacksmash.patch</changelog>
<changelog author="rguenther@suse.com" date="1407931200">- Enable running the testsuite and store results in a gdb-testresults
  package.
- Add gdb-rpmlintrc to filter errors about the buildroot mentioned
  in testresult logs.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1412942400">- Added gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-2of2.patch and
  gdb-async-stopped-on-pid-arg-testsuite.patch to resolve
  https://sourceware.org/bugzilla/show_bug.cgi?id=17347</changelog>
<changelog author="cshorler@googlemail.com" date="1418644800">- Update for GDB 7.8.1
  * removed (already in upstream):
    gdb-babeltrace-configure.patch
    gdb-async-stopped-on-pid-arg-2of2.patch
  * amended (partially in upstream):
    gdb-archer.patch
    gdb-attach-fail-reasons-5of5.patch
    gdb-async-stopped-on-pid-arg-1of2.patch
    gdb-async-stopped-on-pid-arg-testsuite.patch</changelog>
<changelog author="rguenther@suse.com" date="1424865600">- Use patchlist.pl to merge with gdb-7.9-10.fc22, a rebase to FSF GDB 7.9.
  The GDB 7.8 features are:
  * Python Scripting
  - You can now access frame registers from Python scripts.
  - New attribute 'producer' for gdb.Symtab objects.
  * New Python-based convenience functions:
  - $_caller_is(name [, number_of_frames])
  - $_caller_matches(regexp [, number_of_frames])
  - $_any_caller_is(name [, number_of_frames])
  - $_any_caller_matches(regexp [, number_of_frames])
  * New commands
  - queue-signal signal-name-or-number
    Queue a signal to be delivered to the thread when it is resumed.
  * On resume, GDB now always passes the signal the program had stopped
    for to the thread the signal was sent to, even if the user changed
    threads before resuming.  Previously GDB would often (but not
    always) deliver the signal to the thread that happens to be current
    at resume time.
  * Conversely, the "signal" command now consistently delivers the
    requested signal to the current thread.  GDB now asks for
    confirmation if the program had stopped for a signal and the user
    switched threads meanwhile.
  * "breakpoint always-inserted" modes "off" and "auto" merged.
    Now, when 'breakpoint always-inserted mode' is set to "off", GDB
    won't remove breakpoints from the target until all threads stop,
    even in non-stop mode.  The "auto" mode has been removed, and "off"
    is now the default mode.
  * MI changes
  - The -list-thread-groups command outputs an exit-code field for
    inferiors that have exited.
- removed (upstream) gdb-async-stopped-on-pid-arg-1of2.patch,
  gdb-async-stopped-on-pid-arg-testsuite.patch,
  gdb-python-completer-1of2.patch, gdb-python-completer-2of2.patch
  and gdb-readline-6.3.5.patch
- added gdb-jit-reader-multilib.patch, gdb-no-dg-extract-results-py.patch,
  gdb-python-gil.patch, gdb-python3-py_hash_t-32bit.patch,
  gdb-python3-testsuite.patch and gdb-vla-intel-logical-not.patch</changelog>
<changelog author="rguenther@suse.com" date="1425038400">- Strip date and runtimes from gdb-testsuite contents.</changelog>
<changelog author="schwab@suse.de" date="1425384000">- Build multi-target also on aarch64</changelog>
<changelog author="schwab@suse.de" date="1435579200">- Add guile-devel to enable Scheme scripting support
- Run ada tests also on ppc64 and s390</changelog>
<changelog author="rguenther@suse.com" date="1435838400">- Remove auto-loading non-existent /etc/gdbinit.d/gdb-heap.py
  from /etc/gdbinit</changelog>
<changelog author="matz@suse.de" date="1436529600">- Rebase to gdb version 7.9.1:
  fixes PR python/18299, python/18285.
- Add gdb-s390-reorder-arch.diff [bnc #936050]
- Added patches for fate#318039, s390 z13 support:
  0001-S390-Fix-compiler-invocation-with-compile-command.patch
  0001-S390-Support-new-vector-register-sections.patch
  0001-S390-Add-target-descriptions-for-vector-register-set.patch
  0002-S390-Add-vector-register-support-to-gdb.patch
  0003-S390-Add-vector-register-support-to-gdbserver.patch
  0004-S390-Vector-register-test-case.patch
  0005-S390-Name-invisible-registers-with-the-empty-string-.patch
- Remove now obsolete SLE12-only patches:
  gdb-7.7-bnc896586.patch, gdb-7.7-bnc895831.patch,
  gdb-7.7-bnc891040-1.patch, gdb-7.7-bnc891040-2.patch,
  gdb-7.7-bnc891040-3.patch, gdb-7.7-bnc891040-4.patch,
  gdb-7.7-bnc891040-5.patch</changelog>
<changelog author="matz@suse.de" date="1439553600">- Add missing patches from binutils for z13 support. [bnc #936050]</changelog>

</package>
<package pkgid="6c20e124e7fd5524e502a921b2434ea117fb22cbeb5d12b216390c2794e6f69e" name="gdm" arch="src">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="5360dcf8f8e011203cc44d8e57b6a9990b248832de24f5a81e449e0df8f71a87" name="gdm" arch="x86_64">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="5a4338055a65fe6f4de31f58dff4e2f12c95e00c8f5328ef79650a612371506f" name="gdm-branding-upstream" arch="noarch">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="4bb260c3e5ff32a0ce8aed1da11c09e3e74ddd65c552ca7e33dc8e1424d3aad1" name="gdm-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="df89839017bd66985358c7a567a4aff53d35f7f994b9eea686b3397e338559cb" name="gdm-debugsource" arch="x86_64">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="16e8b5ca96dffacdcebb7b0361ee915615e409df9eaafe05af383931940a377b" name="gdm-devel" arch="x86_64">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="825cc83d4b15363ab638381ed6e43a6e3dd4ab2f9c458e6486c8eb0e0dae4e08" name="gdm-lang" arch="noarch">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="5182220aa4dc1a51ba9a47636eb42b0995dd8e4e48ac455a76a57bada2ad8ec7" name="gdmflexiserver" arch="noarch">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="48fe24a054c03d9ccd715e66ae12bef6e8f41eaa0926ab6f5e61d2fed4292053" name="geoclue2" arch="src">
    <version epoch="0" ver="2.2.0" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1375704000">- Add ldconfig call to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.99.3:
  + All D-Bus prop names capitalized as per general conventions.
  + Expose D-Bus specification XML file in pkg-config file.
  + Fix some potential crashes in error handling code.
  + Remove unused build-time yelp dependency.
  + Correct the libsoup dependency in pkg-config (although it
    doesn't affect any applications at the moment).
  + Fix some compiler warnings.
- Changes from version 1.99.2:
  + Drop client-side library.
  + Add COPYING file.
  + Install geoip-lookup with make install. This makes life easier
    for binary distributions that can then ship geoip-lookup in a
    package.
  + Distribute server documentation.
  + Distribute &amp; install interface XML file.
  + Add/update forgotten copyright headers.
- Changes from version 1.99.1:
  + Move to system D-Bus.
  + Import geoip code from geocode-glib.
  + Add option to automatically exit on inactivity. By default it:
  - Runs indefinitely when launched manually.
  - Exits after 5 seconds of inactivity when (auto)launched by
    D-Bus.
  + Relicense from LGPLv2+ to GPLv2+.
  + Some build/installation related fixes.
  + Correctly version pkg-config file.
  + Fix crash on error.
  + Add --version cmdline option.
- Changes from version 1.99.0:
  + Bump the version number.
- Drop typelib-1_0-GeoClue-1_0 and libgeoclue-1_0-0 subpackages:
  the client-side library was dropped with version 1.99.2.
- Add geoclue2-no-root.patch: Add configure option to specify
  service user.
- Add call to autoreconf in build phase, as above patch touches
  the buildsystem.
- Define dbus_user: srvGeoClue.
- Pass --with-dbus-service-user=%{dbus_user} to configure.
- Create %dbus_user during pre phase if the user does not yet
  exist.</changelog>
<changelog author="dimstar@opensuse.org" date="1378728000">- Do not package the D-Bus service for now. This makes the package
  'broken', but allows us to build against the D-Bus interface and
  not block inclusion of other packages any furhter (bnc#838360).</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Add COPYING to the package as %doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Re-enable the D-Bus service, as the services have been white-
  listed for Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1379246400">- Provide dbus(org.freedesktop.GeoClue2) instead of dbus(GeoClue2),
  as this is much closer to reality.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.0.0:
  + Generate docs for D-Bus interface.
  + Fix build against Automake 1.13.
  + Two minor fixes/cleanups.
- Changes from version 1.99.4:
  + Correct check for whether db needs update in geoip-update.
  + Fix geoip-update by direct usage of libsoup for HTTP GET.
  + Don't inhibit compiler warnings in build.
  + Fix various potential crashers.
  + Take 'DistanceThreshold' property into account.
  + Watch for and signal out location changes.
  + Add configure option to specify service user.
  + Add documentation comments to D-Bus interface XML.
  + Fix various compiler warnings.
  + Switch to Fedora's geoip server until we've our server setup.
  + Minor fixes to pkgconfig file.
  + Setup a glib log domain.
  + Some optimizations.
  + More debug logging.
- Drop geoclue2-no-root.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we do no
  longer carry any patch requiring to bootstrap.</changelog>
<changelog author="dimstar@opensuse.org" date="1381147200">- Create and package %{_localstatedir}/lib/%{dbus_user} (the dbus
  user's home directory).</changelog>
<changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 2.1.0:
  + Application authentication agents support:
  - API for agents to register themselves.
  - API that agents need to implement.
  - Configure option to enable requirement of authorization from
    agent. Until there is at least one agent out there, this
    requirement is disabled by default.
  - A demo agent.
  - Option in ${sysconfdir}/geoclue.conf containing whitelist of
    all our agents.
  + Don't use proxy. Seems proxy settings are per-user and system
    users (which geoclue is supposed to run as) do not have access
    to them.
  + Add support for bus-activation via systemd service unit.
  + Add mandatory 'DesktopId' property to Client interface.
  + Use HTTPS to connect to geoip.fedoraproject.org. The actual
    resource is behind HTTPS so using HTTP leads to redirections
    and thefore redundant TCP packets.
  + Fixes to build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
<changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
<changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
<changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
<changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
<changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
<changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
<changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
<changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
<changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>

</package>
<package pkgid="e595236963558538b6ab491d61715a0417a72649afd28b7b9af024126313adb9" name="geoclue2" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1375704000">- Add ldconfig call to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.99.3:
  + All D-Bus prop names capitalized as per general conventions.
  + Expose D-Bus specification XML file in pkg-config file.
  + Fix some potential crashes in error handling code.
  + Remove unused build-time yelp dependency.
  + Correct the libsoup dependency in pkg-config (although it
    doesn't affect any applications at the moment).
  + Fix some compiler warnings.
- Changes from version 1.99.2:
  + Drop client-side library.
  + Add COPYING file.
  + Install geoip-lookup with make install. This makes life easier
    for binary distributions that can then ship geoip-lookup in a
    package.
  + Distribute server documentation.
  + Distribute &amp; install interface XML file.
  + Add/update forgotten copyright headers.
- Changes from version 1.99.1:
  + Move to system D-Bus.
  + Import geoip code from geocode-glib.
  + Add option to automatically exit on inactivity. By default it:
  - Runs indefinitely when launched manually.
  - Exits after 5 seconds of inactivity when (auto)launched by
    D-Bus.
  + Relicense from LGPLv2+ to GPLv2+.
  + Some build/installation related fixes.
  + Correctly version pkg-config file.
  + Fix crash on error.
  + Add --version cmdline option.
- Changes from version 1.99.0:
  + Bump the version number.
- Drop typelib-1_0-GeoClue-1_0 and libgeoclue-1_0-0 subpackages:
  the client-side library was dropped with version 1.99.2.
- Add geoclue2-no-root.patch: Add configure option to specify
  service user.
- Add call to autoreconf in build phase, as above patch touches
  the buildsystem.
- Define dbus_user: srvGeoClue.
- Pass --with-dbus-service-user=%{dbus_user} to configure.
- Create %dbus_user during pre phase if the user does not yet
  exist.</changelog>
<changelog author="dimstar@opensuse.org" date="1378728000">- Do not package the D-Bus service for now. This makes the package
  'broken', but allows us to build against the D-Bus interface and
  not block inclusion of other packages any furhter (bnc#838360).</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Add COPYING to the package as %doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Re-enable the D-Bus service, as the services have been white-
  listed for Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1379246400">- Provide dbus(org.freedesktop.GeoClue2) instead of dbus(GeoClue2),
  as this is much closer to reality.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.0.0:
  + Generate docs for D-Bus interface.
  + Fix build against Automake 1.13.
  + Two minor fixes/cleanups.
- Changes from version 1.99.4:
  + Correct check for whether db needs update in geoip-update.
  + Fix geoip-update by direct usage of libsoup for HTTP GET.
  + Don't inhibit compiler warnings in build.
  + Fix various potential crashers.
  + Take 'DistanceThreshold' property into account.
  + Watch for and signal out location changes.
  + Add configure option to specify service user.
  + Add documentation comments to D-Bus interface XML.
  + Fix various compiler warnings.
  + Switch to Fedora's geoip server until we've our server setup.
  + Minor fixes to pkgconfig file.
  + Setup a glib log domain.
  + Some optimizations.
  + More debug logging.
- Drop geoclue2-no-root.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we do no
  longer carry any patch requiring to bootstrap.</changelog>
<changelog author="dimstar@opensuse.org" date="1381147200">- Create and package %{_localstatedir}/lib/%{dbus_user} (the dbus
  user's home directory).</changelog>
<changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 2.1.0:
  + Application authentication agents support:
  - API for agents to register themselves.
  - API that agents need to implement.
  - Configure option to enable requirement of authorization from
    agent. Until there is at least one agent out there, this
    requirement is disabled by default.
  - A demo agent.
  - Option in ${sysconfdir}/geoclue.conf containing whitelist of
    all our agents.
  + Don't use proxy. Seems proxy settings are per-user and system
    users (which geoclue is supposed to run as) do not have access
    to them.
  + Add support for bus-activation via systemd service unit.
  + Add mandatory 'DesktopId' property to Client interface.
  + Use HTTPS to connect to geoip.fedoraproject.org. The actual
    resource is behind HTTPS so using HTTP leads to redirections
    and thefore redundant TCP packets.
  + Fixes to build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
<changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
<changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
<changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
<changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
<changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
<changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
<changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
<changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
<changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>

</package>
<package pkgid="85a4b006a61ef2966990bb9bcb28ab137e2af989fae6c97763dc532e1c47a6b4" name="geoclue2-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1375704000">- Add ldconfig call to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.99.3:
  + All D-Bus prop names capitalized as per general conventions.
  + Expose D-Bus specification XML file in pkg-config file.
  + Fix some potential crashes in error handling code.
  + Remove unused build-time yelp dependency.
  + Correct the libsoup dependency in pkg-config (although it
    doesn't affect any applications at the moment).
  + Fix some compiler warnings.
- Changes from version 1.99.2:
  + Drop client-side library.
  + Add COPYING file.
  + Install geoip-lookup with make install. This makes life easier
    for binary distributions that can then ship geoip-lookup in a
    package.
  + Distribute server documentation.
  + Distribute &amp; install interface XML file.
  + Add/update forgotten copyright headers.
- Changes from version 1.99.1:
  + Move to system D-Bus.
  + Import geoip code from geocode-glib.
  + Add option to automatically exit on inactivity. By default it:
  - Runs indefinitely when launched manually.
  - Exits after 5 seconds of inactivity when (auto)launched by
    D-Bus.
  + Relicense from LGPLv2+ to GPLv2+.
  + Some build/installation related fixes.
  + Correctly version pkg-config file.
  + Fix crash on error.
  + Add --version cmdline option.
- Changes from version 1.99.0:
  + Bump the version number.
- Drop typelib-1_0-GeoClue-1_0 and libgeoclue-1_0-0 subpackages:
  the client-side library was dropped with version 1.99.2.
- Add geoclue2-no-root.patch: Add configure option to specify
  service user.
- Add call to autoreconf in build phase, as above patch touches
  the buildsystem.
- Define dbus_user: srvGeoClue.
- Pass --with-dbus-service-user=%{dbus_user} to configure.
- Create %dbus_user during pre phase if the user does not yet
  exist.</changelog>
<changelog author="dimstar@opensuse.org" date="1378728000">- Do not package the D-Bus service for now. This makes the package
  'broken', but allows us to build against the D-Bus interface and
  not block inclusion of other packages any furhter (bnc#838360).</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Add COPYING to the package as %doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Re-enable the D-Bus service, as the services have been white-
  listed for Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1379246400">- Provide dbus(org.freedesktop.GeoClue2) instead of dbus(GeoClue2),
  as this is much closer to reality.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.0.0:
  + Generate docs for D-Bus interface.
  + Fix build against Automake 1.13.
  + Two minor fixes/cleanups.
- Changes from version 1.99.4:
  + Correct check for whether db needs update in geoip-update.
  + Fix geoip-update by direct usage of libsoup for HTTP GET.
  + Don't inhibit compiler warnings in build.
  + Fix various potential crashers.
  + Take 'DistanceThreshold' property into account.
  + Watch for and signal out location changes.
  + Add configure option to specify service user.
  + Add documentation comments to D-Bus interface XML.
  + Fix various compiler warnings.
  + Switch to Fedora's geoip server until we've our server setup.
  + Minor fixes to pkgconfig file.
  + Setup a glib log domain.
  + Some optimizations.
  + More debug logging.
- Drop geoclue2-no-root.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we do no
  longer carry any patch requiring to bootstrap.</changelog>
<changelog author="dimstar@opensuse.org" date="1381147200">- Create and package %{_localstatedir}/lib/%{dbus_user} (the dbus
  user's home directory).</changelog>
<changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 2.1.0:
  + Application authentication agents support:
  - API for agents to register themselves.
  - API that agents need to implement.
  - Configure option to enable requirement of authorization from
    agent. Until there is at least one agent out there, this
    requirement is disabled by default.
  - A demo agent.
  - Option in ${sysconfdir}/geoclue.conf containing whitelist of
    all our agents.
  + Don't use proxy. Seems proxy settings are per-user and system
    users (which geoclue is supposed to run as) do not have access
    to them.
  + Add support for bus-activation via systemd service unit.
  + Add mandatory 'DesktopId' property to Client interface.
  + Use HTTPS to connect to geoip.fedoraproject.org. The actual
    resource is behind HTTPS so using HTTP leads to redirections
    and thefore redundant TCP packets.
  + Fixes to build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
<changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
<changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
<changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
<changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
<changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
<changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
<changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
<changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
<changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>

</package>
<package pkgid="f9ff2e25a531d248116e36b58532d6f6aa3af1999a1badcf13379e062476fb6f" name="geoclue2-debugsource" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1375704000">- Add ldconfig call to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.99.3:
  + All D-Bus prop names capitalized as per general conventions.
  + Expose D-Bus specification XML file in pkg-config file.
  + Fix some potential crashes in error handling code.
  + Remove unused build-time yelp dependency.
  + Correct the libsoup dependency in pkg-config (although it
    doesn't affect any applications at the moment).
  + Fix some compiler warnings.
- Changes from version 1.99.2:
  + Drop client-side library.
  + Add COPYING file.
  + Install geoip-lookup with make install. This makes life easier
    for binary distributions that can then ship geoip-lookup in a
    package.
  + Distribute server documentation.
  + Distribute &amp; install interface XML file.
  + Add/update forgotten copyright headers.
- Changes from version 1.99.1:
  + Move to system D-Bus.
  + Import geoip code from geocode-glib.
  + Add option to automatically exit on inactivity. By default it:
  - Runs indefinitely when launched manually.
  - Exits after 5 seconds of inactivity when (auto)launched by
    D-Bus.
  + Relicense from LGPLv2+ to GPLv2+.
  + Some build/installation related fixes.
  + Correctly version pkg-config file.
  + Fix crash on error.
  + Add --version cmdline option.
- Changes from version 1.99.0:
  + Bump the version number.
- Drop typelib-1_0-GeoClue-1_0 and libgeoclue-1_0-0 subpackages:
  the client-side library was dropped with version 1.99.2.
- Add geoclue2-no-root.patch: Add configure option to specify
  service user.
- Add call to autoreconf in build phase, as above patch touches
  the buildsystem.
- Define dbus_user: srvGeoClue.
- Pass --with-dbus-service-user=%{dbus_user} to configure.
- Create %dbus_user during pre phase if the user does not yet
  exist.</changelog>
<changelog author="dimstar@opensuse.org" date="1378728000">- Do not package the D-Bus service for now. This makes the package
  'broken', but allows us to build against the D-Bus interface and
  not block inclusion of other packages any furhter (bnc#838360).</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Add COPYING to the package as %doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Re-enable the D-Bus service, as the services have been white-
  listed for Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1379246400">- Provide dbus(org.freedesktop.GeoClue2) instead of dbus(GeoClue2),
  as this is much closer to reality.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.0.0:
  + Generate docs for D-Bus interface.
  + Fix build against Automake 1.13.
  + Two minor fixes/cleanups.
- Changes from version 1.99.4:
  + Correct check for whether db needs update in geoip-update.
  + Fix geoip-update by direct usage of libsoup for HTTP GET.
  + Don't inhibit compiler warnings in build.
  + Fix various potential crashers.
  + Take 'DistanceThreshold' property into account.
  + Watch for and signal out location changes.
  + Add configure option to specify service user.
  + Add documentation comments to D-Bus interface XML.
  + Fix various compiler warnings.
  + Switch to Fedora's geoip server until we've our server setup.
  + Minor fixes to pkgconfig file.
  + Setup a glib log domain.
  + Some optimizations.
  + More debug logging.
- Drop geoclue2-no-root.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we do no
  longer carry any patch requiring to bootstrap.</changelog>
<changelog author="dimstar@opensuse.org" date="1381147200">- Create and package %{_localstatedir}/lib/%{dbus_user} (the dbus
  user's home directory).</changelog>
<changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 2.1.0:
  + Application authentication agents support:
  - API for agents to register themselves.
  - API that agents need to implement.
  - Configure option to enable requirement of authorization from
    agent. Until there is at least one agent out there, this
    requirement is disabled by default.
  - A demo agent.
  - Option in ${sysconfdir}/geoclue.conf containing whitelist of
    all our agents.
  + Don't use proxy. Seems proxy settings are per-user and system
    users (which geoclue is supposed to run as) do not have access
    to them.
  + Add support for bus-activation via systemd service unit.
  + Add mandatory 'DesktopId' property to Client interface.
  + Use HTTPS to connect to geoip.fedoraproject.org. The actual
    resource is behind HTTPS so using HTTP leads to redirections
    and thefore redundant TCP packets.
  + Fixes to build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
<changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
<changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
<changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
<changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
<changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
<changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
<changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
<changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
<changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>

</package>
<package pkgid="fe45f73ae511b44b0f2258ee28678d70f21064f6ea27ef271b9f61fa86f6f82e" name="geoclue2-devel" arch="x86_64">
    <version epoch="0" ver="2.2.0" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1375704000">- Add ldconfig call to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.99.3:
  + All D-Bus prop names capitalized as per general conventions.
  + Expose D-Bus specification XML file in pkg-config file.
  + Fix some potential crashes in error handling code.
  + Remove unused build-time yelp dependency.
  + Correct the libsoup dependency in pkg-config (although it
    doesn't affect any applications at the moment).
  + Fix some compiler warnings.
- Changes from version 1.99.2:
  + Drop client-side library.
  + Add COPYING file.
  + Install geoip-lookup with make install. This makes life easier
    for binary distributions that can then ship geoip-lookup in a
    package.
  + Distribute server documentation.
  + Distribute &amp; install interface XML file.
  + Add/update forgotten copyright headers.
- Changes from version 1.99.1:
  + Move to system D-Bus.
  + Import geoip code from geocode-glib.
  + Add option to automatically exit on inactivity. By default it:
  - Runs indefinitely when launched manually.
  - Exits after 5 seconds of inactivity when (auto)launched by
    D-Bus.
  + Relicense from LGPLv2+ to GPLv2+.
  + Some build/installation related fixes.
  + Correctly version pkg-config file.
  + Fix crash on error.
  + Add --version cmdline option.
- Changes from version 1.99.0:
  + Bump the version number.
- Drop typelib-1_0-GeoClue-1_0 and libgeoclue-1_0-0 subpackages:
  the client-side library was dropped with version 1.99.2.
- Add geoclue2-no-root.patch: Add configure option to specify
  service user.
- Add call to autoreconf in build phase, as above patch touches
  the buildsystem.
- Define dbus_user: srvGeoClue.
- Pass --with-dbus-service-user=%{dbus_user} to configure.
- Create %dbus_user during pre phase if the user does not yet
  exist.</changelog>
<changelog author="dimstar@opensuse.org" date="1378728000">- Do not package the D-Bus service for now. This makes the package
  'broken', but allows us to build against the D-Bus interface and
  not block inclusion of other packages any furhter (bnc#838360).</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Add COPYING to the package as %doc.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Re-enable the D-Bus service, as the services have been white-
  listed for Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1379246400">- Provide dbus(org.freedesktop.GeoClue2) instead of dbus(GeoClue2),
  as this is much closer to reality.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.0.0:
  + Generate docs for D-Bus interface.
  + Fix build against Automake 1.13.
  + Two minor fixes/cleanups.
- Changes from version 1.99.4:
  + Correct check for whether db needs update in geoip-update.
  + Fix geoip-update by direct usage of libsoup for HTTP GET.
  + Don't inhibit compiler warnings in build.
  + Fix various potential crashers.
  + Take 'DistanceThreshold' property into account.
  + Watch for and signal out location changes.
  + Add configure option to specify service user.
  + Add documentation comments to D-Bus interface XML.
  + Fix various compiler warnings.
  + Switch to Fedora's geoip server until we've our server setup.
  + Minor fixes to pkgconfig file.
  + Setup a glib log domain.
  + Some optimizations.
  + More debug logging.
- Drop geoclue2-no-root.patch: fixed upstream.
- Drop libtool BuildRequires and call to autoreconf, as we do no
  longer carry any patch requiring to bootstrap.</changelog>
<changelog author="dimstar@opensuse.org" date="1381147200">- Create and package %{_localstatedir}/lib/%{dbus_user} (the dbus
  user's home directory).</changelog>
<changelog author="zaitor@opensuse.org" date="1390132800">- Update to version 2.1.0:
  + Application authentication agents support:
  - API for agents to register themselves.
  - API that agents need to implement.
  - Configure option to enable requirement of authorization from
    agent. Until there is at least one agent out there, this
    requirement is disabled by default.
  - A demo agent.
  - Option in ${sysconfdir}/geoclue.conf containing whitelist of
    all our agents.
  + Don't use proxy. Seems proxy settings are per-user and system
    users (which geoclue is supposed to run as) do not have access
    to them.
  + Add support for bus-activation via systemd service unit.
  + Add mandatory 'DesktopId' property to Client interface.
  + Use HTTPS to connect to geoip.fedoraproject.org. The actual
    resource is behind HTTPS so using HTTP leads to redirections
    and thefore redundant TCP packets.
  + Fixes to build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1391515200">- Update to version 2.1.2:
  + Fix some crashing bugs.
  + Ignore WiFis with '_nomap' suffix.
  + Configure options for disabling WiFi, 3G and GPS modem sources.
  + Avoid spaming the network resources for ignorable changes to
    network setup.
  + Add some required files to distribution that we forgot in last
    release.
- Changes from version 2.1.1:
  + 3GPP-based geolocation source.
  + Uses ModemManager to get cell tower info from 3GPP modem and
    uses opencellid.org's public API to translate that into a
    location.
  + GPS modem-based geolocation source: If your 3GPP modem has a
    GPS, geoclue can now make use of it.
  + WiFi-based geolocation source.
  + Uses Mozilla Location Service to find location based on nearby
    WiFi networks.
  + Refresh location on changes in WiFi networks.
  + Option in configuration file to make geoclue use Google Maps
    Geolocation API rather than Mozilla Location Service.
  + Option in configuration file to enable submission of wifi data
    to Mozilla Location Service. If this option is enabled, the
    data is submitted each time geoclue gets a GPS lock. That
    means, its not completely autonomous and data is only
    submitted if an application, e.g gnome-maps requests current
    location with exact accuracy.
  + API for clients to specify what level of geolocation accuracy
    they need, e.g city-level, street-level or exact etc.
  + API to check if geolocation service is in use. Next version of
    gnome-shell will make use of that to show an icon in the panel
    to indicate to user that their location is being accessed.
  + Application authorization agent.
  + Make agent completely optional. We will revert this once we
    have a reliable mechanism to identify applications.
  + Identify agent and client applications by their desktop IDs
    rather than paths of their binaries.
  + Ability for agents to dictate the accuracy level allowed for
    clients.
  + Maintain a whitelist of clients in configuration that do not
    need agent authorization.
  + Avoid redundant queries to web services.
  + Install demo applications and provide a desktop file for them.
  + Many more internal fixes and clean-ups.
- Add pkgconfig(libnm-glib), pkgconfig(mm-glib) and
  pkgconfig(libxml-2.0) BuildRequires: new dependencies.
- Lower NetworkManager dependency to 0.9.8 in configure.</changelog>
<changelog author="zaitor@opensuse.org" date="1392984000">- Update to version 2.1.3:
  + Agents can now dictate maximum accuracy level allowed for all
    clients through a D-Bus property. The next version of
    gnome-shell will make use of that and provide an option to
    enable/disable geolocation in topbar menu.
  + Add D-Bus property to specify available accuracy level. For now
    we just hardcode it to report that we can provide exact
    accuracy.
  + Give agents time to register themselves on startup before
    processing client requests.
  + Move configuration file under geoclue subdir so that in future
    we can easily add more configuration files if needed.
  + Fixes to build.
  + Some internal clean-ups.</changelog>
<changelog author="zaitor@opensuse.org" date="1393156800">- Add pkgconfig(systemd) BuildRequires and add relevant
  systemdmacros to pre/post/preun/postun.
- Create softlink /usr/sbin/rcgeoclue to /usr/sbin/service.</changelog>
<changelog author="zaitor@opensuse.org" date="1394712000">- Update to version 2.1.6:
  + Correct binary path is demo's desktop file.
  + Move demo apps from /usr/share to /usr/libexec.
- Changes from version 2.1.5:
  + Add a NULL check to fix a crasher.
  + Setup D-Bus policy to be able to access NetworManager API.
  + Expected agent object path now static. This breaks agent
    interface but it was needed to fix the D-Bus policy.
  + Fix issue of us giving every connection access to every
    property on the system bus.
- Changes from version 2.1.4:
  + Don't depend on unreleased libnm-glib.
- No longer use sed to lower libnm-glib requirement, fixed
  upstream.</changelog>
<changelog author="adrian@suse.de" date="1396612800">- use addFilter instead of setBadness</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Actually drop the rpmlintrc: the dbus service has been
  authorized.</changelog>
<changelog author="dimstar@opensuse.org" date="1407412800">- Update to version 2.1.9:
  + Move from NetworkManager to direct use of wpa_supplicant to
    retreive WiFI data, for greater portability.
  + Port from opencellid.org to Mozilla Location Service for
    3G-geolocation.
  + Network data submission
  - Explicit option in config to enable submission.
  - Commandline options to enable network data submission and set
    nickname.
  - Submit 3G data.
  - Submit under 'geoclue' nick by default.
  + Fix a few crashes.
  + Drop now redundant workaround for pure geoip queries.
  + Ability to mark an app as system component in the config so
    that:
  - Agent can't decide its accuracy level nor agent is asked to
    authorize it. This mean automatic timezone in GNOME will
    continue working even if you disable geolocation.
  - App is not taken into account for 'InUse' property. That
    means you will no longer have to see location crosshair in
    gnome-shell's topbar forever just because you have automatic
    timezone enabled.
  + Exit demo app if geoclue deactivates it.
  + Improved debug log.
  + Many other internal changes and minor improvements.
- Changes from version 2.1.8:
  + Switch to Mozilla Location Service for geoip as well.
  + Allow specifying nickname to submit network data with.
  + Report actual available accuracy level and keep it up2date.
  + Add 'Active' property to indicate client state.
  + Expose altitude info (if known).
  + Timeout on inactivity, rather than no clients.
  + Automatically:
  - stop the client if max accuracy level is set to 0.
  - start the client if max accuracy level is set to non-0 and it
    was automatically stopped.
  + Don't disable modem after using it. Disabling the modem,
    disables it for everyone so if there was an active connection
    going on through the modem, geoclue will cause it to
    disconnect. While we need to have some centralized means to
    enable/disable modem and ideally geoclue shouldn't do any
    enabling/disabling of modems at all, for now lets just only
    enable the modem.
  + Fix issue of missed location updates.
  + Whitelist correct ID for gnome-settings-daemon in default
    config.
  + Replace '--disable-wifi-source' configure option with
    '--disable-network-manager'. i-e now you disable usage of
    NetworkManger explicitly rather than wifi source, which is now
    always built and enabled.
  + Drop now redundant geoip server.
  + Don't distribute .desktop.in files for demos.
  + Plug some leaks.
  + More debug log.
  + Other minor fixes.
- Changes from version 2.1.7:
  + 'InUse' property now only affected by active clients. This
    fixes the issue of gnome-shell incorrectly showing 'geolocation
    in use' icon.
  + Move DBus interface files to their canonical location:
    /usr/share/dbus-1/interfaces/.
  + Drop redundant check for the C++ compiler in configure script.
  + Demo agent now prints 'geolocation in use' info.
- Drop pkgconfig(libnm-glib) and pkgconfig(libxml-2.0)
  BuildRequires: no longer needed.
- Add geoclue2-permit-gnome-maps.patch: Allow gnome-maps to access
  geoclue.
- Also drop the invalid rpmlintrc variant geoclue2.rpmlintrc.</changelog>
<changelog author="dimstar@opensuse.org" date="1412424000">- Update to version 2.1.10:
  + Disallow application if disabled explicitly in the
    configuration.
  + Make it easy to add alternative modem source(s), e.g
    ofono-based.
  + Map:
  - country-level accuracy to city-level since no source provides
    country-level accuracy.
  - neighborhood-level accuracy to city-level in WiFi source
    (only) so applications requesting neighborhood-level accuracy
    still get a location even if there is no modem available.
  + Fixes to WiFi source.
  + For easier debugging, add:
  - more debug prints.
  - commandline options to where-am-i demo application to specify
    timeout and requested accuracy level.
  + Fix a potential build failure.</changelog>
<changelog author="mpluskal@suse.com" date="1423742400">- Cleanup spec file with spec-cleaner
- Update dependencies
- Do not try to remove .la files</changelog>
<changelog author="zaitor@opensuse.org" date="1428753600">- Update to version 2.2.0:
  + Report 'Speed' and 'Heading' on location updates.
  + Try to provide the most accurate location first.
  + Avoid a crash by ensuring requested max accuracy is within
    bounds.
  + Fix GPS coordinates parsing.
  + Fix GeoIP on machines without WiFi hardware.
  + Gracefully handle inexistent agent.
  + Stop sources whose accuracy level becomes higher, rather than
    lower, than the requested level.
  + Keep old location object alive on D-Bus for a bit longer to
    ensure applications are not accessing it still after it is
    destroyed.
  + Don't enable the modem. Seems at least GNOME takes care of
    modem enabling for us and besides this shouldn't be done by
    geoclue anyway (fdo#85040).
  + Wait for modem to be enabled before checking availability of
    location capabilities and using them. This is particularly
    important for pin-enabled modems.
  + Ignore redundant GPS location updates.
  + Fix some potential crashes.
  + Some improvements to output of where-am-i demo application.</changelog>
<changelog author="zaitor@opensuse.org" date="1446724800">- Correct geoclue2-permit-gnome-maps.patch to include system=false,
  all services are supposed to have a system section. Fixes
  (boo#953865).</changelog>

</package>
<package pkgid="5c2c0a3e7093ac420c03c337babc19f6a27210c7b4221ba0d1cee974037ae986" name="gnome-boxes" arch="src">
    <version epoch="0" ver="3.16.2" rel="4.1"/>

<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Fix a regression that breaks express installation for Microsoft
    Windows.
  + Fix the issue of VM always going fullscreen on going back from
    properties.
  + Fix a potential crash.
  + A minor documentation fix.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 3.13.3:
  + Remove 'New' entry from global menu. It's context-sensitive and
    therefore does not belong there.
  + Specify exact Ctrl key in hint for ungrabbing..
  + Don't auto-fullscreen Boxes on launch.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405944000">- Update to version 3.13.4:
  + Don't reveal fullscreen topbar on pointer over edges to not
    interfere with user trying to reach WM decorations or apply
    edge gestures (as used in many modern operating systems) in the
    guest.
  + Don't show WM decorations in fullscreen. This is especially
    ugly in classic-mode where we have 3 buttons.
  + Drop weird and buggy custom thumbnail hilighting and enable it
    from gtk+ through latest libgd.
  + Fix max storage capacity going lower than min storage capacity.
  + Add F1 shortcut for help.
  + Allow selecting file from remote shares (for real this time).
  + Drop usage of deprecated APIs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.13.90:
  + Allow running boxes in their own seperate windows.
  + Handle initrd script injection method and therefore support for
    Debian express installation through libosinfo &gt;= 0.2.11.
  + Introduce media downloading feature. You can now enter an
    HTTP(S) URL to a remote media in wizard and Boxes will download
    it for you.
  + Allow editting the machine's name through the title in
    properties view.
  + More keyboard shortcuts:
  - Ctrl+N for launching wizard.
  - Ctrl+F for launching search.
  + If internet connection is required for express installation by
    an OS:
  - ensure it is available before allowing to start express
    installation.
  - Inform user of this requirement.
  + Replace hardcoded colors and background images with theme
    colors.
  + Menu button in selection mode disappeared recently due to a
    gtk+ bug, lets bring it back using a simple work around.
  + Fix support for non-kvm hosts.
  + Ensure minimum storage for an OS is actually known before using
    that information.
  + Improved maximum disk capacity calculation.
  + Warn on not enough space on the host to inscrease maximum disk
    size of VMs.
  + More information in DOAP file.
  + Updated translations.
- Add pkgconfig(libarchive) BuildRequires: new dependency.
- Add gnome-boxes-asneeded.patch: Fix building with
  - Wl,--as-needed.
- Add libtool BuildRequires and call to autoreconf: above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Add ability to create, delete, rename and revert to VM
    snapshots.
  + Don't ignore CDROM devices.
  + Fix build against '-Wl,--as-needed' linker flags.
  + Better error message on failure to start a VM.
  + Fix a regression that broke showing of 'empty boxes' UI.
  + Alignment fixes.
  + Updated translations.
- Drop gnome-boxes-asneeded.patch: Fixed upstream.
- Drop libtool BuildRequires and call to autoreconf: No longer
  needed.</changelog>
<changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 3.13.92:
  + Remove custom code for RTL back icon as gtk+ takes care of that
    for us now.
  + Fix hang on editting of box name.
  + Drop some redunant color hardcoding from theme.
  + Don't show snapshots option for machines that can't handle
    snapshots.
  + Don't show snapshots option for machines under installation.
  + Update CPU model for existing/old machines that were created by
    Boxes.
  + Make empty boxes image more visible.
  + Fix alignment of a empty boxes description label.
  + Fix Boxes ending up in weird states on hitting back button.
  + Close secondary window automatically if its machine
  - stops running.
  - is deleted.
  + Update screenshot on machine disconnection.
  + Fix checkboxes in selection mode by use of latest libgd.
  + Make D-Bus autolaunch work.
  + User help:
  - Add page about keyboard shortcuts.
  - Add page about gnome-continuous images.
  - Add page about snapshots.
  - Add pages about various options in properties view.
  - Updates/cleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Documentation improvements.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + Documentation improvements.
  + Fix gnome-shell search provider by updating .desktop ID.
  + Add padding to left and right of display header bar.
  + Fix handling of remote non-ISO (import) images.
  + Update CPU model also for boxes created through old Boxes on
    startup.
  + Replace user interface with bridge in existing domains on
    startup.
  + Fix download of logo files by direct use of actual HTTPS URLs
    as redirection is currently not handled by Boxes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + Remove redundant revealer from snapshots view.
  + Fix a potential crash on snapshot deletion.
  + Print a more descriptive warning on failing to rename a
    snapshot.
  + Report ovirt support in configure summary.
- Changes from version 3.14.1.2:
  + Fix crash on launching a VNC box.
  + Fix exit of wizard when going back from customization screen.
  + Don't start the VM after reverting to a snapshot unless it was
    running in foreground before the reversion operation.
  + Always show "Reverting to SNAPSHOT_NAME" message when reverting
    as we can never be sure about the speed of the operation.
  + Fix the issue of pause button still being available to user
    when a selected box(es) is already being paused and Boxes
    leading into interesting scenerios if user clicks on the
    button.
  + Fix the issue of change of box name from toolbar title not
    getting saved.
  + Fix cancellation of media setup and therefore wizard jumping to
    setup page even after user has cancelled creation of
    corresponding VM.
  + Continue wizard to next step on user hitting 'Enter' in URL
    entry.
  + Correctly handle HTTP(S) redirection.
  + Remove a now redundant work around.
  + Updated translations.
- Changes from version 3.14.1.1:
  + Fix express installation for Microsoft Windows.
  + Fix handling of downloads of unknown size.</changelog>
<changelog author="zaitor@opensuse.org" date="1423656000">- Update to version 3.14.3.1 (boo#916784):
  + Fix generated C files.
- Changes from version 3.14.3:
  + Fix express installation for Fedora and RHEL.
  + Add automated tests.
  + Fix import of VMs from system libvirt broker.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742400">- Update to version 3.15.2:
  + Properties view rework:
  - Now a separate dialog-like window.
  - Rename 'Login' section to 'General'.
  - Merge 'Display' secion into 'General' section.
  - Replace sidebar with:
    . system stats and controls in the 'System' section.
    . notebook tabs for each section.
  - Remove the vague 'Resize guest' property and instead tell
    SPICE to always try to scale the guest display to allocated
    size.
  - Remove vague auto-usbredirection option.
  - Replace use of vague term 'Virtualizer' with a more
    friendlier (and consistent) term, 'Broker'.
  - Show broker name instead of URL in properties view but do
    show broker URL in troubleshooting log.
  + Wizard view rework:
  - Now a separate dialog-like window.
  - Replace sidebar with step info in the title.
  - Present a popover with item-specific actions menu that
    includes:
    . Open in new window.
    . Favorite.
    . Pause.
    . Delete.
    . Properties when user:
  - right-clicks (or hits menu key) over an item.
  - clicks a new menu button in display view that replaces
    the 'properties' button.
  + Show box display resolution on window resize.
  + Automatically save/pause VMs running in background, except for
    ones under express installation.
  + Tell SPICE to also upscale the display when needed so that we
    don't end up with a very tiny box display on hidpi screens when
    no autoresolution is in effect (e.g boot loader screen or
    guests with no qxl/agent).
  + Download files to temporary location first. This fixes the
    issue of Boxes trying to use partially downloaded files.
  + Set 'USB' bus for mouse since the default PS/2 bus has been
    reported to be much slower.
  + Correctly handle the case of user clicking on a box that is
    being saved.
  + Explicitly disable HPET, based on input from libvirt and Qemu
    developers.
  + Report ovirt support in the configure summary.
  + Don't spin spinner on paused machines.
  + If Boxes is launched with SOUP_DEBUG environment variable set,
    attach a logger to libsoup session.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742401">- Update to version 3.15.3:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are:
  - Ctrl+Alt+Backspace
  - Ctrl+Alt+F1
  - Ctrl+Alt+F2
  - Ctrl+Alt+F7
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow customization
    of resources before a box is created.
  + As a USB device is no longer available on the host after being
    redirected to guest, do not present keyboards and mice to user
    for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.
- Add pkgconfig(libusb-1.0) BuildRequires: New dependency.</changelog>
<changelog author="badshah400@gmail.com" date="1423742402">- Update to version 3.15.4:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are: Ctrl+Alt+Backspace, Ctrl+Alt+F1, Ctrl+Alt+F2,
    Ctrl+Alt+F7.
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow
    customization of resources before a box is created.
  + As a USB device is no longer available on the host after
    being redirected to guest, do not present keyboards and
    mice to user for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + New cool first experience screen.
  + Drop intro page from wizard now that we have a cool first
    experience screen.
  + Show step titles rather than numbers in wizard titlebar.
  + Ensure titlebar always has a title.
  + Inform users how to release the keyboard grab.
  + Don't autosave a VM when view/editing its propties.
  + Show normal entries for editable string properties instead of
    our custom widget that shows a button to edit.
  + Ensure selection-mode exit on launching properties view.
  + URL entry in wizard:
  - Provide completion based on media URLs known to libosinfo.
  - More thorough validation of local URLs.
  - Don't enable 'Continue' for invalid URLs.
  - Better explain expected URLs.
  + Fix and improve snapshot naming.
  + Add automated UI tests.
  + Import of system libvirt VMs:
  - Fix import failing with a weird 'Empty location' error
    message.
  - Don't needlessly chmod disk (and hence launch annoying
    policykit dialog).
  - Replace network interface so imported VM can be started
    successfully.
  + Set proper accessible name on windows.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Cache express install toggle, username, password and product
    key for every media. No need to keep product keys in a separate
    file and having to paste them each time you create a windows
    box anymore.
  + Beautify:
  - USB devices list
  - Snapshots list
  - Resource graphs
  + Friendlier 'no snapshots' view.
  + Fix invisible separators in menus.
  + Fix some label alignments.
  + Fix main window hanging in weird blank state on launching new
    windows.
  + Don't present useless 'Open in new window' option when box
    already has its own window.
  + Connect to local libvirt machines' SPICE display through a
    file descriptor. While this alone doesn't fix the issue of
    spice connection being exposed to other local users yet, all
    work in Boxes is done for that.
  + Mark a few forgotten UI strings for translation.
  + Fix a few UI strings.
  + Ellipsize URL in the middle to ensure the hostname and
    filename are visible.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.92:
  + Notifications no longer timeout when mouse is hovering above
    them.
  + Show correct favorite option in box actions popup menu.
  + Only show resolution overlay on actual resize.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 3.16.0:
  + Ensure wizard page titles are translated.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Support home directories on filesystems without (good) O_DIRECT
    support.
  + Fix the issue of wizard remaining in seconardary views when
    cancelled through 'Esc' key.
  + Show Boxes in menus of other desktops than GNOME, too.
  + Only add USB keyboard and mouse to new VMs they are supported
    out of the box by the guest OS. This fixes installation of
    Windows XP.
  + Gracefully handle case of no cpu defined in libvirt VMs.
  + Load correct screenshot for shutdown machines.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Provide symbolic icon.
  + Case-insensitive check for file extension.
  + Remove redundant work-around for Windows XP installer.
  + Ensure "Saving…" status goes away on error.
  + Only autosave running machines.
  + Assign 2G RAM to VMs by default.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446120000">- Stop passing --enable-smartcard to configure, we are using SLE
  base for Leap, and we are missing smartcard support (boo#952712).</changelog>

</package>
<package pkgid="ef7521feec8702302d0534b60027bd4587d42daecfc4e4fbe8e17472ad8a99f1" name="gnome-boxes" arch="x86_64">
    <version epoch="0" ver="3.16.2" rel="4.1"/>

<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Fix a regression that breaks express installation for Microsoft
    Windows.
  + Fix the issue of VM always going fullscreen on going back from
    properties.
  + Fix a potential crash.
  + A minor documentation fix.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 3.13.3:
  + Remove 'New' entry from global menu. It's context-sensitive and
    therefore does not belong there.
  + Specify exact Ctrl key in hint for ungrabbing..
  + Don't auto-fullscreen Boxes on launch.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405944000">- Update to version 3.13.4:
  + Don't reveal fullscreen topbar on pointer over edges to not
    interfere with user trying to reach WM decorations or apply
    edge gestures (as used in many modern operating systems) in the
    guest.
  + Don't show WM decorations in fullscreen. This is especially
    ugly in classic-mode where we have 3 buttons.
  + Drop weird and buggy custom thumbnail hilighting and enable it
    from gtk+ through latest libgd.
  + Fix max storage capacity going lower than min storage capacity.
  + Add F1 shortcut for help.
  + Allow selecting file from remote shares (for real this time).
  + Drop usage of deprecated APIs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.13.90:
  + Allow running boxes in their own seperate windows.
  + Handle initrd script injection method and therefore support for
    Debian express installation through libosinfo &gt;= 0.2.11.
  + Introduce media downloading feature. You can now enter an
    HTTP(S) URL to a remote media in wizard and Boxes will download
    it for you.
  + Allow editting the machine's name through the title in
    properties view.
  + More keyboard shortcuts:
  - Ctrl+N for launching wizard.
  - Ctrl+F for launching search.
  + If internet connection is required for express installation by
    an OS:
  - ensure it is available before allowing to start express
    installation.
  - Inform user of this requirement.
  + Replace hardcoded colors and background images with theme
    colors.
  + Menu button in selection mode disappeared recently due to a
    gtk+ bug, lets bring it back using a simple work around.
  + Fix support for non-kvm hosts.
  + Ensure minimum storage for an OS is actually known before using
    that information.
  + Improved maximum disk capacity calculation.
  + Warn on not enough space on the host to inscrease maximum disk
    size of VMs.
  + More information in DOAP file.
  + Updated translations.
- Add pkgconfig(libarchive) BuildRequires: new dependency.
- Add gnome-boxes-asneeded.patch: Fix building with
  - Wl,--as-needed.
- Add libtool BuildRequires and call to autoreconf: above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Add ability to create, delete, rename and revert to VM
    snapshots.
  + Don't ignore CDROM devices.
  + Fix build against '-Wl,--as-needed' linker flags.
  + Better error message on failure to start a VM.
  + Fix a regression that broke showing of 'empty boxes' UI.
  + Alignment fixes.
  + Updated translations.
- Drop gnome-boxes-asneeded.patch: Fixed upstream.
- Drop libtool BuildRequires and call to autoreconf: No longer
  needed.</changelog>
<changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 3.13.92:
  + Remove custom code for RTL back icon as gtk+ takes care of that
    for us now.
  + Fix hang on editting of box name.
  + Drop some redunant color hardcoding from theme.
  + Don't show snapshots option for machines that can't handle
    snapshots.
  + Don't show snapshots option for machines under installation.
  + Update CPU model for existing/old machines that were created by
    Boxes.
  + Make empty boxes image more visible.
  + Fix alignment of a empty boxes description label.
  + Fix Boxes ending up in weird states on hitting back button.
  + Close secondary window automatically if its machine
  - stops running.
  - is deleted.
  + Update screenshot on machine disconnection.
  + Fix checkboxes in selection mode by use of latest libgd.
  + Make D-Bus autolaunch work.
  + User help:
  - Add page about keyboard shortcuts.
  - Add page about gnome-continuous images.
  - Add page about snapshots.
  - Add pages about various options in properties view.
  - Updates/cleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Documentation improvements.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + Documentation improvements.
  + Fix gnome-shell search provider by updating .desktop ID.
  + Add padding to left and right of display header bar.
  + Fix handling of remote non-ISO (import) images.
  + Update CPU model also for boxes created through old Boxes on
    startup.
  + Replace user interface with bridge in existing domains on
    startup.
  + Fix download of logo files by direct use of actual HTTPS URLs
    as redirection is currently not handled by Boxes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + Remove redundant revealer from snapshots view.
  + Fix a potential crash on snapshot deletion.
  + Print a more descriptive warning on failing to rename a
    snapshot.
  + Report ovirt support in configure summary.
- Changes from version 3.14.1.2:
  + Fix crash on launching a VNC box.
  + Fix exit of wizard when going back from customization screen.
  + Don't start the VM after reverting to a snapshot unless it was
    running in foreground before the reversion operation.
  + Always show "Reverting to SNAPSHOT_NAME" message when reverting
    as we can never be sure about the speed of the operation.
  + Fix the issue of pause button still being available to user
    when a selected box(es) is already being paused and Boxes
    leading into interesting scenerios if user clicks on the
    button.
  + Fix the issue of change of box name from toolbar title not
    getting saved.
  + Fix cancellation of media setup and therefore wizard jumping to
    setup page even after user has cancelled creation of
    corresponding VM.
  + Continue wizard to next step on user hitting 'Enter' in URL
    entry.
  + Correctly handle HTTP(S) redirection.
  + Remove a now redundant work around.
  + Updated translations.
- Changes from version 3.14.1.1:
  + Fix express installation for Microsoft Windows.
  + Fix handling of downloads of unknown size.</changelog>
<changelog author="zaitor@opensuse.org" date="1423656000">- Update to version 3.14.3.1 (boo#916784):
  + Fix generated C files.
- Changes from version 3.14.3:
  + Fix express installation for Fedora and RHEL.
  + Add automated tests.
  + Fix import of VMs from system libvirt broker.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742400">- Update to version 3.15.2:
  + Properties view rework:
  - Now a separate dialog-like window.
  - Rename 'Login' section to 'General'.
  - Merge 'Display' secion into 'General' section.
  - Replace sidebar with:
    . system stats and controls in the 'System' section.
    . notebook tabs for each section.
  - Remove the vague 'Resize guest' property and instead tell
    SPICE to always try to scale the guest display to allocated
    size.
  - Remove vague auto-usbredirection option.
  - Replace use of vague term 'Virtualizer' with a more
    friendlier (and consistent) term, 'Broker'.
  - Show broker name instead of URL in properties view but do
    show broker URL in troubleshooting log.
  + Wizard view rework:
  - Now a separate dialog-like window.
  - Replace sidebar with step info in the title.
  - Present a popover with item-specific actions menu that
    includes:
    . Open in new window.
    . Favorite.
    . Pause.
    . Delete.
    . Properties when user:
  - right-clicks (or hits menu key) over an item.
  - clicks a new menu button in display view that replaces
    the 'properties' button.
  + Show box display resolution on window resize.
  + Automatically save/pause VMs running in background, except for
    ones under express installation.
  + Tell SPICE to also upscale the display when needed so that we
    don't end up with a very tiny box display on hidpi screens when
    no autoresolution is in effect (e.g boot loader screen or
    guests with no qxl/agent).
  + Download files to temporary location first. This fixes the
    issue of Boxes trying to use partially downloaded files.
  + Set 'USB' bus for mouse since the default PS/2 bus has been
    reported to be much slower.
  + Correctly handle the case of user clicking on a box that is
    being saved.
  + Explicitly disable HPET, based on input from libvirt and Qemu
    developers.
  + Report ovirt support in the configure summary.
  + Don't spin spinner on paused machines.
  + If Boxes is launched with SOUP_DEBUG environment variable set,
    attach a logger to libsoup session.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742401">- Update to version 3.15.3:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are:
  - Ctrl+Alt+Backspace
  - Ctrl+Alt+F1
  - Ctrl+Alt+F2
  - Ctrl+Alt+F7
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow customization
    of resources before a box is created.
  + As a USB device is no longer available on the host after being
    redirected to guest, do not present keyboards and mice to user
    for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.
- Add pkgconfig(libusb-1.0) BuildRequires: New dependency.</changelog>
<changelog author="badshah400@gmail.com" date="1423742402">- Update to version 3.15.4:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are: Ctrl+Alt+Backspace, Ctrl+Alt+F1, Ctrl+Alt+F2,
    Ctrl+Alt+F7.
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow
    customization of resources before a box is created.
  + As a USB device is no longer available on the host after
    being redirected to guest, do not present keyboards and
    mice to user for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + New cool first experience screen.
  + Drop intro page from wizard now that we have a cool first
    experience screen.
  + Show step titles rather than numbers in wizard titlebar.
  + Ensure titlebar always has a title.
  + Inform users how to release the keyboard grab.
  + Don't autosave a VM when view/editing its propties.
  + Show normal entries for editable string properties instead of
    our custom widget that shows a button to edit.
  + Ensure selection-mode exit on launching properties view.
  + URL entry in wizard:
  - Provide completion based on media URLs known to libosinfo.
  - More thorough validation of local URLs.
  - Don't enable 'Continue' for invalid URLs.
  - Better explain expected URLs.
  + Fix and improve snapshot naming.
  + Add automated UI tests.
  + Import of system libvirt VMs:
  - Fix import failing with a weird 'Empty location' error
    message.
  - Don't needlessly chmod disk (and hence launch annoying
    policykit dialog).
  - Replace network interface so imported VM can be started
    successfully.
  + Set proper accessible name on windows.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Cache express install toggle, username, password and product
    key for every media. No need to keep product keys in a separate
    file and having to paste them each time you create a windows
    box anymore.
  + Beautify:
  - USB devices list
  - Snapshots list
  - Resource graphs
  + Friendlier 'no snapshots' view.
  + Fix invisible separators in menus.
  + Fix some label alignments.
  + Fix main window hanging in weird blank state on launching new
    windows.
  + Don't present useless 'Open in new window' option when box
    already has its own window.
  + Connect to local libvirt machines' SPICE display through a
    file descriptor. While this alone doesn't fix the issue of
    spice connection being exposed to other local users yet, all
    work in Boxes is done for that.
  + Mark a few forgotten UI strings for translation.
  + Fix a few UI strings.
  + Ellipsize URL in the middle to ensure the hostname and
    filename are visible.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.92:
  + Notifications no longer timeout when mouse is hovering above
    them.
  + Show correct favorite option in box actions popup menu.
  + Only show resolution overlay on actual resize.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 3.16.0:
  + Ensure wizard page titles are translated.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Support home directories on filesystems without (good) O_DIRECT
    support.
  + Fix the issue of wizard remaining in seconardary views when
    cancelled through 'Esc' key.
  + Show Boxes in menus of other desktops than GNOME, too.
  + Only add USB keyboard and mouse to new VMs they are supported
    out of the box by the guest OS. This fixes installation of
    Windows XP.
  + Gracefully handle case of no cpu defined in libvirt VMs.
  + Load correct screenshot for shutdown machines.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Provide symbolic icon.
  + Case-insensitive check for file extension.
  + Remove redundant work-around for Windows XP installer.
  + Ensure "Saving…" status goes away on error.
  + Only autosave running machines.
  + Assign 2G RAM to VMs by default.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446120000">- Stop passing --enable-smartcard to configure, we are using SLE
  base for Leap, and we are missing smartcard support (boo#952712).</changelog>

</package>
<package pkgid="15074c79091bb3e52e23566f13dbbd7bc2126fa4137995fc2099e78092156b0a" name="gnome-boxes-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.2" rel="4.1"/>

<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Fix a regression that breaks express installation for Microsoft
    Windows.
  + Fix the issue of VM always going fullscreen on going back from
    properties.
  + Fix a potential crash.
  + A minor documentation fix.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 3.13.3:
  + Remove 'New' entry from global menu. It's context-sensitive and
    therefore does not belong there.
  + Specify exact Ctrl key in hint for ungrabbing..
  + Don't auto-fullscreen Boxes on launch.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405944000">- Update to version 3.13.4:
  + Don't reveal fullscreen topbar on pointer over edges to not
    interfere with user trying to reach WM decorations or apply
    edge gestures (as used in many modern operating systems) in the
    guest.
  + Don't show WM decorations in fullscreen. This is especially
    ugly in classic-mode where we have 3 buttons.
  + Drop weird and buggy custom thumbnail hilighting and enable it
    from gtk+ through latest libgd.
  + Fix max storage capacity going lower than min storage capacity.
  + Add F1 shortcut for help.
  + Allow selecting file from remote shares (for real this time).
  + Drop usage of deprecated APIs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.13.90:
  + Allow running boxes in their own seperate windows.
  + Handle initrd script injection method and therefore support for
    Debian express installation through libosinfo &gt;= 0.2.11.
  + Introduce media downloading feature. You can now enter an
    HTTP(S) URL to a remote media in wizard and Boxes will download
    it for you.
  + Allow editting the machine's name through the title in
    properties view.
  + More keyboard shortcuts:
  - Ctrl+N for launching wizard.
  - Ctrl+F for launching search.
  + If internet connection is required for express installation by
    an OS:
  - ensure it is available before allowing to start express
    installation.
  - Inform user of this requirement.
  + Replace hardcoded colors and background images with theme
    colors.
  + Menu button in selection mode disappeared recently due to a
    gtk+ bug, lets bring it back using a simple work around.
  + Fix support for non-kvm hosts.
  + Ensure minimum storage for an OS is actually known before using
    that information.
  + Improved maximum disk capacity calculation.
  + Warn on not enough space on the host to inscrease maximum disk
    size of VMs.
  + More information in DOAP file.
  + Updated translations.
- Add pkgconfig(libarchive) BuildRequires: new dependency.
- Add gnome-boxes-asneeded.patch: Fix building with
  - Wl,--as-needed.
- Add libtool BuildRequires and call to autoreconf: above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Add ability to create, delete, rename and revert to VM
    snapshots.
  + Don't ignore CDROM devices.
  + Fix build against '-Wl,--as-needed' linker flags.
  + Better error message on failure to start a VM.
  + Fix a regression that broke showing of 'empty boxes' UI.
  + Alignment fixes.
  + Updated translations.
- Drop gnome-boxes-asneeded.patch: Fixed upstream.
- Drop libtool BuildRequires and call to autoreconf: No longer
  needed.</changelog>
<changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 3.13.92:
  + Remove custom code for RTL back icon as gtk+ takes care of that
    for us now.
  + Fix hang on editting of box name.
  + Drop some redunant color hardcoding from theme.
  + Don't show snapshots option for machines that can't handle
    snapshots.
  + Don't show snapshots option for machines under installation.
  + Update CPU model for existing/old machines that were created by
    Boxes.
  + Make empty boxes image more visible.
  + Fix alignment of a empty boxes description label.
  + Fix Boxes ending up in weird states on hitting back button.
  + Close secondary window automatically if its machine
  - stops running.
  - is deleted.
  + Update screenshot on machine disconnection.
  + Fix checkboxes in selection mode by use of latest libgd.
  + Make D-Bus autolaunch work.
  + User help:
  - Add page about keyboard shortcuts.
  - Add page about gnome-continuous images.
  - Add page about snapshots.
  - Add pages about various options in properties view.
  - Updates/cleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Documentation improvements.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + Documentation improvements.
  + Fix gnome-shell search provider by updating .desktop ID.
  + Add padding to left and right of display header bar.
  + Fix handling of remote non-ISO (import) images.
  + Update CPU model also for boxes created through old Boxes on
    startup.
  + Replace user interface with bridge in existing domains on
    startup.
  + Fix download of logo files by direct use of actual HTTPS URLs
    as redirection is currently not handled by Boxes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + Remove redundant revealer from snapshots view.
  + Fix a potential crash on snapshot deletion.
  + Print a more descriptive warning on failing to rename a
    snapshot.
  + Report ovirt support in configure summary.
- Changes from version 3.14.1.2:
  + Fix crash on launching a VNC box.
  + Fix exit of wizard when going back from customization screen.
  + Don't start the VM after reverting to a snapshot unless it was
    running in foreground before the reversion operation.
  + Always show "Reverting to SNAPSHOT_NAME" message when reverting
    as we can never be sure about the speed of the operation.
  + Fix the issue of pause button still being available to user
    when a selected box(es) is already being paused and Boxes
    leading into interesting scenerios if user clicks on the
    button.
  + Fix the issue of change of box name from toolbar title not
    getting saved.
  + Fix cancellation of media setup and therefore wizard jumping to
    setup page even after user has cancelled creation of
    corresponding VM.
  + Continue wizard to next step on user hitting 'Enter' in URL
    entry.
  + Correctly handle HTTP(S) redirection.
  + Remove a now redundant work around.
  + Updated translations.
- Changes from version 3.14.1.1:
  + Fix express installation for Microsoft Windows.
  + Fix handling of downloads of unknown size.</changelog>
<changelog author="zaitor@opensuse.org" date="1423656000">- Update to version 3.14.3.1 (boo#916784):
  + Fix generated C files.
- Changes from version 3.14.3:
  + Fix express installation for Fedora and RHEL.
  + Add automated tests.
  + Fix import of VMs from system libvirt broker.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742400">- Update to version 3.15.2:
  + Properties view rework:
  - Now a separate dialog-like window.
  - Rename 'Login' section to 'General'.
  - Merge 'Display' secion into 'General' section.
  - Replace sidebar with:
    . system stats and controls in the 'System' section.
    . notebook tabs for each section.
  - Remove the vague 'Resize guest' property and instead tell
    SPICE to always try to scale the guest display to allocated
    size.
  - Remove vague auto-usbredirection option.
  - Replace use of vague term 'Virtualizer' with a more
    friendlier (and consistent) term, 'Broker'.
  - Show broker name instead of URL in properties view but do
    show broker URL in troubleshooting log.
  + Wizard view rework:
  - Now a separate dialog-like window.
  - Replace sidebar with step info in the title.
  - Present a popover with item-specific actions menu that
    includes:
    . Open in new window.
    . Favorite.
    . Pause.
    . Delete.
    . Properties when user:
  - right-clicks (or hits menu key) over an item.
  - clicks a new menu button in display view that replaces
    the 'properties' button.
  + Show box display resolution on window resize.
  + Automatically save/pause VMs running in background, except for
    ones under express installation.
  + Tell SPICE to also upscale the display when needed so that we
    don't end up with a very tiny box display on hidpi screens when
    no autoresolution is in effect (e.g boot loader screen or
    guests with no qxl/agent).
  + Download files to temporary location first. This fixes the
    issue of Boxes trying to use partially downloaded files.
  + Set 'USB' bus for mouse since the default PS/2 bus has been
    reported to be much slower.
  + Correctly handle the case of user clicking on a box that is
    being saved.
  + Explicitly disable HPET, based on input from libvirt and Qemu
    developers.
  + Report ovirt support in the configure summary.
  + Don't spin spinner on paused machines.
  + If Boxes is launched with SOUP_DEBUG environment variable set,
    attach a logger to libsoup session.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742401">- Update to version 3.15.3:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are:
  - Ctrl+Alt+Backspace
  - Ctrl+Alt+F1
  - Ctrl+Alt+F2
  - Ctrl+Alt+F7
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow customization
    of resources before a box is created.
  + As a USB device is no longer available on the host after being
    redirected to guest, do not present keyboards and mice to user
    for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.
- Add pkgconfig(libusb-1.0) BuildRequires: New dependency.</changelog>
<changelog author="badshah400@gmail.com" date="1423742402">- Update to version 3.15.4:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are: Ctrl+Alt+Backspace, Ctrl+Alt+F1, Ctrl+Alt+F2,
    Ctrl+Alt+F7.
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow
    customization of resources before a box is created.
  + As a USB device is no longer available on the host after
    being redirected to guest, do not present keyboards and
    mice to user for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + New cool first experience screen.
  + Drop intro page from wizard now that we have a cool first
    experience screen.
  + Show step titles rather than numbers in wizard titlebar.
  + Ensure titlebar always has a title.
  + Inform users how to release the keyboard grab.
  + Don't autosave a VM when view/editing its propties.
  + Show normal entries for editable string properties instead of
    our custom widget that shows a button to edit.
  + Ensure selection-mode exit on launching properties view.
  + URL entry in wizard:
  - Provide completion based on media URLs known to libosinfo.
  - More thorough validation of local URLs.
  - Don't enable 'Continue' for invalid URLs.
  - Better explain expected URLs.
  + Fix and improve snapshot naming.
  + Add automated UI tests.
  + Import of system libvirt VMs:
  - Fix import failing with a weird 'Empty location' error
    message.
  - Don't needlessly chmod disk (and hence launch annoying
    policykit dialog).
  - Replace network interface so imported VM can be started
    successfully.
  + Set proper accessible name on windows.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Cache express install toggle, username, password and product
    key for every media. No need to keep product keys in a separate
    file and having to paste them each time you create a windows
    box anymore.
  + Beautify:
  - USB devices list
  - Snapshots list
  - Resource graphs
  + Friendlier 'no snapshots' view.
  + Fix invisible separators in menus.
  + Fix some label alignments.
  + Fix main window hanging in weird blank state on launching new
    windows.
  + Don't present useless 'Open in new window' option when box
    already has its own window.
  + Connect to local libvirt machines' SPICE display through a
    file descriptor. While this alone doesn't fix the issue of
    spice connection being exposed to other local users yet, all
    work in Boxes is done for that.
  + Mark a few forgotten UI strings for translation.
  + Fix a few UI strings.
  + Ellipsize URL in the middle to ensure the hostname and
    filename are visible.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.92:
  + Notifications no longer timeout when mouse is hovering above
    them.
  + Show correct favorite option in box actions popup menu.
  + Only show resolution overlay on actual resize.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 3.16.0:
  + Ensure wizard page titles are translated.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Support home directories on filesystems without (good) O_DIRECT
    support.
  + Fix the issue of wizard remaining in seconardary views when
    cancelled through 'Esc' key.
  + Show Boxes in menus of other desktops than GNOME, too.
  + Only add USB keyboard and mouse to new VMs they are supported
    out of the box by the guest OS. This fixes installation of
    Windows XP.
  + Gracefully handle case of no cpu defined in libvirt VMs.
  + Load correct screenshot for shutdown machines.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Provide symbolic icon.
  + Case-insensitive check for file extension.
  + Remove redundant work-around for Windows XP installer.
  + Ensure "Saving…" status goes away on error.
  + Only autosave running machines.
  + Assign 2G RAM to VMs by default.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446120000">- Stop passing --enable-smartcard to configure, we are using SLE
  base for Leap, and we are missing smartcard support (boo#952712).</changelog>

</package>
<package pkgid="ce06fd6a921ea1659294947a7a3d96d89177992217d90470bf6a5472de4cd616" name="gnome-boxes-debugsource" arch="x86_64">
    <version epoch="0" ver="3.16.2" rel="4.1"/>

<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Fix a regression that breaks express installation for Microsoft
    Windows.
  + Fix the issue of VM always going fullscreen on going back from
    properties.
  + Fix a potential crash.
  + A minor documentation fix.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 3.13.3:
  + Remove 'New' entry from global menu. It's context-sensitive and
    therefore does not belong there.
  + Specify exact Ctrl key in hint for ungrabbing..
  + Don't auto-fullscreen Boxes on launch.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405944000">- Update to version 3.13.4:
  + Don't reveal fullscreen topbar on pointer over edges to not
    interfere with user trying to reach WM decorations or apply
    edge gestures (as used in many modern operating systems) in the
    guest.
  + Don't show WM decorations in fullscreen. This is especially
    ugly in classic-mode where we have 3 buttons.
  + Drop weird and buggy custom thumbnail hilighting and enable it
    from gtk+ through latest libgd.
  + Fix max storage capacity going lower than min storage capacity.
  + Add F1 shortcut for help.
  + Allow selecting file from remote shares (for real this time).
  + Drop usage of deprecated APIs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.13.90:
  + Allow running boxes in their own seperate windows.
  + Handle initrd script injection method and therefore support for
    Debian express installation through libosinfo &gt;= 0.2.11.
  + Introduce media downloading feature. You can now enter an
    HTTP(S) URL to a remote media in wizard and Boxes will download
    it for you.
  + Allow editting the machine's name through the title in
    properties view.
  + More keyboard shortcuts:
  - Ctrl+N for launching wizard.
  - Ctrl+F for launching search.
  + If internet connection is required for express installation by
    an OS:
  - ensure it is available before allowing to start express
    installation.
  - Inform user of this requirement.
  + Replace hardcoded colors and background images with theme
    colors.
  + Menu button in selection mode disappeared recently due to a
    gtk+ bug, lets bring it back using a simple work around.
  + Fix support for non-kvm hosts.
  + Ensure minimum storage for an OS is actually known before using
    that information.
  + Improved maximum disk capacity calculation.
  + Warn on not enough space on the host to inscrease maximum disk
    size of VMs.
  + More information in DOAP file.
  + Updated translations.
- Add pkgconfig(libarchive) BuildRequires: new dependency.
- Add gnome-boxes-asneeded.patch: Fix building with
  - Wl,--as-needed.
- Add libtool BuildRequires and call to autoreconf: above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Add ability to create, delete, rename and revert to VM
    snapshots.
  + Don't ignore CDROM devices.
  + Fix build against '-Wl,--as-needed' linker flags.
  + Better error message on failure to start a VM.
  + Fix a regression that broke showing of 'empty boxes' UI.
  + Alignment fixes.
  + Updated translations.
- Drop gnome-boxes-asneeded.patch: Fixed upstream.
- Drop libtool BuildRequires and call to autoreconf: No longer
  needed.</changelog>
<changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 3.13.92:
  + Remove custom code for RTL back icon as gtk+ takes care of that
    for us now.
  + Fix hang on editting of box name.
  + Drop some redunant color hardcoding from theme.
  + Don't show snapshots option for machines that can't handle
    snapshots.
  + Don't show snapshots option for machines under installation.
  + Update CPU model for existing/old machines that were created by
    Boxes.
  + Make empty boxes image more visible.
  + Fix alignment of a empty boxes description label.
  + Fix Boxes ending up in weird states on hitting back button.
  + Close secondary window automatically if its machine
  - stops running.
  - is deleted.
  + Update screenshot on machine disconnection.
  + Fix checkboxes in selection mode by use of latest libgd.
  + Make D-Bus autolaunch work.
  + User help:
  - Add page about keyboard shortcuts.
  - Add page about gnome-continuous images.
  - Add page about snapshots.
  - Add pages about various options in properties view.
  - Updates/cleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Documentation improvements.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + Documentation improvements.
  + Fix gnome-shell search provider by updating .desktop ID.
  + Add padding to left and right of display header bar.
  + Fix handling of remote non-ISO (import) images.
  + Update CPU model also for boxes created through old Boxes on
    startup.
  + Replace user interface with bridge in existing domains on
    startup.
  + Fix download of logo files by direct use of actual HTTPS URLs
    as redirection is currently not handled by Boxes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + Remove redundant revealer from snapshots view.
  + Fix a potential crash on snapshot deletion.
  + Print a more descriptive warning on failing to rename a
    snapshot.
  + Report ovirt support in configure summary.
- Changes from version 3.14.1.2:
  + Fix crash on launching a VNC box.
  + Fix exit of wizard when going back from customization screen.
  + Don't start the VM after reverting to a snapshot unless it was
    running in foreground before the reversion operation.
  + Always show "Reverting to SNAPSHOT_NAME" message when reverting
    as we can never be sure about the speed of the operation.
  + Fix the issue of pause button still being available to user
    when a selected box(es) is already being paused and Boxes
    leading into interesting scenerios if user clicks on the
    button.
  + Fix the issue of change of box name from toolbar title not
    getting saved.
  + Fix cancellation of media setup and therefore wizard jumping to
    setup page even after user has cancelled creation of
    corresponding VM.
  + Continue wizard to next step on user hitting 'Enter' in URL
    entry.
  + Correctly handle HTTP(S) redirection.
  + Remove a now redundant work around.
  + Updated translations.
- Changes from version 3.14.1.1:
  + Fix express installation for Microsoft Windows.
  + Fix handling of downloads of unknown size.</changelog>
<changelog author="zaitor@opensuse.org" date="1423656000">- Update to version 3.14.3.1 (boo#916784):
  + Fix generated C files.
- Changes from version 3.14.3:
  + Fix express installation for Fedora and RHEL.
  + Add automated tests.
  + Fix import of VMs from system libvirt broker.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742400">- Update to version 3.15.2:
  + Properties view rework:
  - Now a separate dialog-like window.
  - Rename 'Login' section to 'General'.
  - Merge 'Display' secion into 'General' section.
  - Replace sidebar with:
    . system stats and controls in the 'System' section.
    . notebook tabs for each section.
  - Remove the vague 'Resize guest' property and instead tell
    SPICE to always try to scale the guest display to allocated
    size.
  - Remove vague auto-usbredirection option.
  - Replace use of vague term 'Virtualizer' with a more
    friendlier (and consistent) term, 'Broker'.
  - Show broker name instead of URL in properties view but do
    show broker URL in troubleshooting log.
  + Wizard view rework:
  - Now a separate dialog-like window.
  - Replace sidebar with step info in the title.
  - Present a popover with item-specific actions menu that
    includes:
    . Open in new window.
    . Favorite.
    . Pause.
    . Delete.
    . Properties when user:
  - right-clicks (or hits menu key) over an item.
  - clicks a new menu button in display view that replaces
    the 'properties' button.
  + Show box display resolution on window resize.
  + Automatically save/pause VMs running in background, except for
    ones under express installation.
  + Tell SPICE to also upscale the display when needed so that we
    don't end up with a very tiny box display on hidpi screens when
    no autoresolution is in effect (e.g boot loader screen or
    guests with no qxl/agent).
  + Download files to temporary location first. This fixes the
    issue of Boxes trying to use partially downloaded files.
  + Set 'USB' bus for mouse since the default PS/2 bus has been
    reported to be much slower.
  + Correctly handle the case of user clicking on a box that is
    being saved.
  + Explicitly disable HPET, based on input from libvirt and Qemu
    developers.
  + Report ovirt support in the configure summary.
  + Don't spin spinner on paused machines.
  + If Boxes is launched with SOUP_DEBUG environment variable set,
    attach a logger to libsoup session.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742401">- Update to version 3.15.3:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are:
  - Ctrl+Alt+Backspace
  - Ctrl+Alt+F1
  - Ctrl+Alt+F2
  - Ctrl+Alt+F7
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow customization
    of resources before a box is created.
  + As a USB device is no longer available on the host after being
    redirected to guest, do not present keyboards and mice to user
    for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.
- Add pkgconfig(libusb-1.0) BuildRequires: New dependency.</changelog>
<changelog author="badshah400@gmail.com" date="1423742402">- Update to version 3.15.4:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are: Ctrl+Alt+Backspace, Ctrl+Alt+F1, Ctrl+Alt+F2,
    Ctrl+Alt+F7.
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow
    customization of resources before a box is created.
  + As a USB device is no longer available on the host after
    being redirected to guest, do not present keyboards and
    mice to user for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + New cool first experience screen.
  + Drop intro page from wizard now that we have a cool first
    experience screen.
  + Show step titles rather than numbers in wizard titlebar.
  + Ensure titlebar always has a title.
  + Inform users how to release the keyboard grab.
  + Don't autosave a VM when view/editing its propties.
  + Show normal entries for editable string properties instead of
    our custom widget that shows a button to edit.
  + Ensure selection-mode exit on launching properties view.
  + URL entry in wizard:
  - Provide completion based on media URLs known to libosinfo.
  - More thorough validation of local URLs.
  - Don't enable 'Continue' for invalid URLs.
  - Better explain expected URLs.
  + Fix and improve snapshot naming.
  + Add automated UI tests.
  + Import of system libvirt VMs:
  - Fix import failing with a weird 'Empty location' error
    message.
  - Don't needlessly chmod disk (and hence launch annoying
    policykit dialog).
  - Replace network interface so imported VM can be started
    successfully.
  + Set proper accessible name on windows.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Cache express install toggle, username, password and product
    key for every media. No need to keep product keys in a separate
    file and having to paste them each time you create a windows
    box anymore.
  + Beautify:
  - USB devices list
  - Snapshots list
  - Resource graphs
  + Friendlier 'no snapshots' view.
  + Fix invisible separators in menus.
  + Fix some label alignments.
  + Fix main window hanging in weird blank state on launching new
    windows.
  + Don't present useless 'Open in new window' option when box
    already has its own window.
  + Connect to local libvirt machines' SPICE display through a
    file descriptor. While this alone doesn't fix the issue of
    spice connection being exposed to other local users yet, all
    work in Boxes is done for that.
  + Mark a few forgotten UI strings for translation.
  + Fix a few UI strings.
  + Ellipsize URL in the middle to ensure the hostname and
    filename are visible.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.92:
  + Notifications no longer timeout when mouse is hovering above
    them.
  + Show correct favorite option in box actions popup menu.
  + Only show resolution overlay on actual resize.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 3.16.0:
  + Ensure wizard page titles are translated.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Support home directories on filesystems without (good) O_DIRECT
    support.
  + Fix the issue of wizard remaining in seconardary views when
    cancelled through 'Esc' key.
  + Show Boxes in menus of other desktops than GNOME, too.
  + Only add USB keyboard and mouse to new VMs they are supported
    out of the box by the guest OS. This fixes installation of
    Windows XP.
  + Gracefully handle case of no cpu defined in libvirt VMs.
  + Load correct screenshot for shutdown machines.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Provide symbolic icon.
  + Case-insensitive check for file extension.
  + Remove redundant work-around for Windows XP installer.
  + Ensure "Saving…" status goes away on error.
  + Only autosave running machines.
  + Assign 2G RAM to VMs by default.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446120000">- Stop passing --enable-smartcard to configure, we are using SLE
  base for Leap, and we are missing smartcard support (boo#952712).</changelog>

</package>
<package pkgid="d50e66e60b3f9543dedc9b4fa195dd828241ffa145ab9491ae7c52cfd7120900" name="gnome-boxes-lang" arch="noarch">
    <version epoch="0" ver="3.16.2" rel="4.1"/>

<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Fix a regression that breaks express installation for Microsoft
    Windows.
  + Fix the issue of VM always going fullscreen on going back from
    properties.
  + Fix a potential crash.
  + A minor documentation fix.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 3.13.3:
  + Remove 'New' entry from global menu. It's context-sensitive and
    therefore does not belong there.
  + Specify exact Ctrl key in hint for ungrabbing..
  + Don't auto-fullscreen Boxes on launch.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405944000">- Update to version 3.13.4:
  + Don't reveal fullscreen topbar on pointer over edges to not
    interfere with user trying to reach WM decorations or apply
    edge gestures (as used in many modern operating systems) in the
    guest.
  + Don't show WM decorations in fullscreen. This is especially
    ugly in classic-mode where we have 3 buttons.
  + Drop weird and buggy custom thumbnail hilighting and enable it
    from gtk+ through latest libgd.
  + Fix max storage capacity going lower than min storage capacity.
  + Add F1 shortcut for help.
  + Allow selecting file from remote shares (for real this time).
  + Drop usage of deprecated APIs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.13.90:
  + Allow running boxes in their own seperate windows.
  + Handle initrd script injection method and therefore support for
    Debian express installation through libosinfo &gt;= 0.2.11.
  + Introduce media downloading feature. You can now enter an
    HTTP(S) URL to a remote media in wizard and Boxes will download
    it for you.
  + Allow editting the machine's name through the title in
    properties view.
  + More keyboard shortcuts:
  - Ctrl+N for launching wizard.
  - Ctrl+F for launching search.
  + If internet connection is required for express installation by
    an OS:
  - ensure it is available before allowing to start express
    installation.
  - Inform user of this requirement.
  + Replace hardcoded colors and background images with theme
    colors.
  + Menu button in selection mode disappeared recently due to a
    gtk+ bug, lets bring it back using a simple work around.
  + Fix support for non-kvm hosts.
  + Ensure minimum storage for an OS is actually known before using
    that information.
  + Improved maximum disk capacity calculation.
  + Warn on not enough space on the host to inscrease maximum disk
    size of VMs.
  + More information in DOAP file.
  + Updated translations.
- Add pkgconfig(libarchive) BuildRequires: new dependency.
- Add gnome-boxes-asneeded.patch: Fix building with
  - Wl,--as-needed.
- Add libtool BuildRequires and call to autoreconf: above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Add ability to create, delete, rename and revert to VM
    snapshots.
  + Don't ignore CDROM devices.
  + Fix build against '-Wl,--as-needed' linker flags.
  + Better error message on failure to start a VM.
  + Fix a regression that broke showing of 'empty boxes' UI.
  + Alignment fixes.
  + Updated translations.
- Drop gnome-boxes-asneeded.patch: Fixed upstream.
- Drop libtool BuildRequires and call to autoreconf: No longer
  needed.</changelog>
<changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 3.13.92:
  + Remove custom code for RTL back icon as gtk+ takes care of that
    for us now.
  + Fix hang on editting of box name.
  + Drop some redunant color hardcoding from theme.
  + Don't show snapshots option for machines that can't handle
    snapshots.
  + Don't show snapshots option for machines under installation.
  + Update CPU model for existing/old machines that were created by
    Boxes.
  + Make empty boxes image more visible.
  + Fix alignment of a empty boxes description label.
  + Fix Boxes ending up in weird states on hitting back button.
  + Close secondary window automatically if its machine
  - stops running.
  - is deleted.
  + Update screenshot on machine disconnection.
  + Fix checkboxes in selection mode by use of latest libgd.
  + Make D-Bus autolaunch work.
  + User help:
  - Add page about keyboard shortcuts.
  - Add page about gnome-continuous images.
  - Add page about snapshots.
  - Add pages about various options in properties view.
  - Updates/cleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Documentation improvements.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + Documentation improvements.
  + Fix gnome-shell search provider by updating .desktop ID.
  + Add padding to left and right of display header bar.
  + Fix handling of remote non-ISO (import) images.
  + Update CPU model also for boxes created through old Boxes on
    startup.
  + Replace user interface with bridge in existing domains on
    startup.
  + Fix download of logo files by direct use of actual HTTPS URLs
    as redirection is currently not handled by Boxes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + Remove redundant revealer from snapshots view.
  + Fix a potential crash on snapshot deletion.
  + Print a more descriptive warning on failing to rename a
    snapshot.
  + Report ovirt support in configure summary.
- Changes from version 3.14.1.2:
  + Fix crash on launching a VNC box.
  + Fix exit of wizard when going back from customization screen.
  + Don't start the VM after reverting to a snapshot unless it was
    running in foreground before the reversion operation.
  + Always show "Reverting to SNAPSHOT_NAME" message when reverting
    as we can never be sure about the speed of the operation.
  + Fix the issue of pause button still being available to user
    when a selected box(es) is already being paused and Boxes
    leading into interesting scenerios if user clicks on the
    button.
  + Fix the issue of change of box name from toolbar title not
    getting saved.
  + Fix cancellation of media setup and therefore wizard jumping to
    setup page even after user has cancelled creation of
    corresponding VM.
  + Continue wizard to next step on user hitting 'Enter' in URL
    entry.
  + Correctly handle HTTP(S) redirection.
  + Remove a now redundant work around.
  + Updated translations.
- Changes from version 3.14.1.1:
  + Fix express installation for Microsoft Windows.
  + Fix handling of downloads of unknown size.</changelog>
<changelog author="zaitor@opensuse.org" date="1423656000">- Update to version 3.14.3.1 (boo#916784):
  + Fix generated C files.
- Changes from version 3.14.3:
  + Fix express installation for Fedora and RHEL.
  + Add automated tests.
  + Fix import of VMs from system libvirt broker.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742400">- Update to version 3.15.2:
  + Properties view rework:
  - Now a separate dialog-like window.
  - Rename 'Login' section to 'General'.
  - Merge 'Display' secion into 'General' section.
  - Replace sidebar with:
    . system stats and controls in the 'System' section.
    . notebook tabs for each section.
  - Remove the vague 'Resize guest' property and instead tell
    SPICE to always try to scale the guest display to allocated
    size.
  - Remove vague auto-usbredirection option.
  - Replace use of vague term 'Virtualizer' with a more
    friendlier (and consistent) term, 'Broker'.
  - Show broker name instead of URL in properties view but do
    show broker URL in troubleshooting log.
  + Wizard view rework:
  - Now a separate dialog-like window.
  - Replace sidebar with step info in the title.
  - Present a popover with item-specific actions menu that
    includes:
    . Open in new window.
    . Favorite.
    . Pause.
    . Delete.
    . Properties when user:
  - right-clicks (or hits menu key) over an item.
  - clicks a new menu button in display view that replaces
    the 'properties' button.
  + Show box display resolution on window resize.
  + Automatically save/pause VMs running in background, except for
    ones under express installation.
  + Tell SPICE to also upscale the display when needed so that we
    don't end up with a very tiny box display on hidpi screens when
    no autoresolution is in effect (e.g boot loader screen or
    guests with no qxl/agent).
  + Download files to temporary location first. This fixes the
    issue of Boxes trying to use partially downloaded files.
  + Set 'USB' bus for mouse since the default PS/2 bus has been
    reported to be much slower.
  + Correctly handle the case of user clicking on a box that is
    being saved.
  + Explicitly disable HPET, based on input from libvirt and Qemu
    developers.
  + Report ovirt support in the configure summary.
  + Don't spin spinner on paused machines.
  + If Boxes is launched with SOUP_DEBUG environment variable set,
    attach a logger to libsoup session.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742401">- Update to version 3.15.3:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are:
  - Ctrl+Alt+Backspace
  - Ctrl+Alt+F1
  - Ctrl+Alt+F2
  - Ctrl+Alt+F7
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow customization
    of resources before a box is created.
  + As a USB device is no longer available on the host after being
    redirected to guest, do not present keyboards and mice to user
    for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.
- Add pkgconfig(libusb-1.0) BuildRequires: New dependency.</changelog>
<changelog author="badshah400@gmail.com" date="1423742402">- Update to version 3.15.4:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are: Ctrl+Alt+Backspace, Ctrl+Alt+F1, Ctrl+Alt+F2,
    Ctrl+Alt+F7.
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow
    customization of resources before a box is created.
  + As a USB device is no longer available on the host after
    being redirected to guest, do not present keyboards and
    mice to user for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + New cool first experience screen.
  + Drop intro page from wizard now that we have a cool first
    experience screen.
  + Show step titles rather than numbers in wizard titlebar.
  + Ensure titlebar always has a title.
  + Inform users how to release the keyboard grab.
  + Don't autosave a VM when view/editing its propties.
  + Show normal entries for editable string properties instead of
    our custom widget that shows a button to edit.
  + Ensure selection-mode exit on launching properties view.
  + URL entry in wizard:
  - Provide completion based on media URLs known to libosinfo.
  - More thorough validation of local URLs.
  - Don't enable 'Continue' for invalid URLs.
  - Better explain expected URLs.
  + Fix and improve snapshot naming.
  + Add automated UI tests.
  + Import of system libvirt VMs:
  - Fix import failing with a weird 'Empty location' error
    message.
  - Don't needlessly chmod disk (and hence launch annoying
    policykit dialog).
  - Replace network interface so imported VM can be started
    successfully.
  + Set proper accessible name on windows.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Cache express install toggle, username, password and product
    key for every media. No need to keep product keys in a separate
    file and having to paste them each time you create a windows
    box anymore.
  + Beautify:
  - USB devices list
  - Snapshots list
  - Resource graphs
  + Friendlier 'no snapshots' view.
  + Fix invisible separators in menus.
  + Fix some label alignments.
  + Fix main window hanging in weird blank state on launching new
    windows.
  + Don't present useless 'Open in new window' option when box
    already has its own window.
  + Connect to local libvirt machines' SPICE display through a
    file descriptor. While this alone doesn't fix the issue of
    spice connection being exposed to other local users yet, all
    work in Boxes is done for that.
  + Mark a few forgotten UI strings for translation.
  + Fix a few UI strings.
  + Ellipsize URL in the middle to ensure the hostname and
    filename are visible.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.92:
  + Notifications no longer timeout when mouse is hovering above
    them.
  + Show correct favorite option in box actions popup menu.
  + Only show resolution overlay on actual resize.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 3.16.0:
  + Ensure wizard page titles are translated.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Support home directories on filesystems without (good) O_DIRECT
    support.
  + Fix the issue of wizard remaining in seconardary views when
    cancelled through 'Esc' key.
  + Show Boxes in menus of other desktops than GNOME, too.
  + Only add USB keyboard and mouse to new VMs they are supported
    out of the box by the guest OS. This fixes installation of
    Windows XP.
  + Gracefully handle case of no cpu defined in libvirt VMs.
  + Load correct screenshot for shutdown machines.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Provide symbolic icon.
  + Case-insensitive check for file extension.
  + Remove redundant work-around for Windows XP installer.
  + Ensure "Saving…" status goes away on error.
  + Only autosave running machines.
  + Assign 2G RAM to VMs by default.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446120000">- Stop passing --enable-smartcard to configure, we are using SLE
  base for Leap, and we are missing smartcard support (boo#952712).</changelog>

</package>
<package pkgid="bdde52ca1bf6402f007e3a3cd8d41c646e095dfab5ef1b4c0b78fd6cec36ed10" name="gnome-keyring" arch="src">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="28ed8eff81c53581804fc4ea70b1671bd6271f2de9f83de95fd62574727b2d7f" name="gnome-keyring" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="be9d8a3fb5b34ab38b848ed17f7b7a6b032cafd81a27b3e5c470d132b858baf5" name="gnome-keyring-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="f44feb4d7b8d89665360b6a490243c6c31b04f2a45692b57b387c4a6b97656f4" name="gnome-keyring-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="2eaf96f3c3e78010f179cd8cc375cd3e1657728ba468e5ffd50bb446584d69f5" name="gnome-keyring-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="f31af55e5ecab9d51ff7468208de53d15e9fd29609c91148d7dcb8377124a2f3" name="gnome-keyring-debugsource" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="ddf6a2a83dd1c278f0fe06c27f63bda0e4df9b61ddcfbf8abe9e742900bf25c1" name="gnome-keyring-lang" arch="noarch">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="b078ab68ffa522c5a37ff7233bd35b21e8ed971e2d0c50ddc847c3854e0907f0" name="gnome-keyring-pam" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="21c35702bf54c06551a341b8f853e28f8fa067651879874c67d8514f0159301e" name="gnome-keyring-pam-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="2edf087a92721c1714c7292e7da83c32612970591a21880e6c494d5984183f94" name="gnome-keyring-pam-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="1fdfa7da9a0d9d6f9d60b4f07beb6f2c5cb512235dc3a2289d69189f859fc1dd" name="gnome-keyring-pam-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="a76f9b9d149a52568b3230d21c2aa1f09b748f4e00f6f81b6c1a9a0bdf2588d2" name="gnome-photos" arch="src">
    <version epoch="0" ver="3.16.3" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1389700800">- Update to version 3.11.4:
  + Bugs fixed: bgo#704947, bgo#709367, bgo#721402, bgo#721696.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1391688000">- Update to version 3.11.5:
  + Implement search.
  + Bugs fixed: bgo#715043, bgo#720404, bgo#720570, bgo#721402.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 3.11.90:
  + Implement search provider.
  + Turn into a DBus activated service.
  + Bugs fixed: bgo#723729.
  + Updated translations.
- Replace pkgconfig(tracker-miner-0.18) and
  pkgconfig(tracker-sparql-0.18) for pkgconfig(tracker-miner-1.0)
  and pkgconfig(tracker-sparql-1.0) BuildRequires.
- Desktopfile was renamed to org.gnome.Photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1393070400">- Add gnome-photos-fix-build-with-tracker-1.0.patch: Replace
  tracker-miner with tracker-control because TrackerMinerManager
  now lives in tracker-control. Replace
  pkgconfig(tracker-miner-1.0) for pkgconfig(tracker-control-1.0)
  BuildRequires following this.
- Add gnome-common BuildRequires and pass autoreconf due to above
  patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1394020800">- Update to version 3.11.91:
  + Bugs fixed: bgo#723664, bgo#725016, bgo#725095, bgo#725327,
    bgo#725328, bgo#725329, bgo#725589.
  + Updated translations.
- Drop gnome-photos-fix-build-with-tracker-1.0.patch: fixed
  upstream.
- Drop gnome-common BuildRequires and call to autoreconf, as we no
  longer carry patches.</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Bugs fixed: bgo#696802, bgo#698941, bgo#725587, bgo#725813,
    bgo#725934, bgo#726162, bgo#726165, bgo#726519.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Scale the thumbnails on HiDpi displays (bgo#726903).
  + Use o.fd.Tracker1.Extract.Priority interface to prioritize
    relevant types (bgo#726919).
  + Crash if Facebook credentials expired (bgo#727205).
  + Updated translations.
- Add itstool and yelp-tools BuildRequires: New dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1406116800">- Update to version 3.13.4:
  + New user help (bgo#711505).
  + Bugs fixed: bgo#708039, bgo#725156, bgo#726505, bgo#726685,
    bgo#726791, bgo#727392, bgo#729396, bgo#730822, bgo#731856,
    bgo#731865, bgo#732011, bgo#732676, bgo#733011, bgo#733355.
  + Updated translations.
- Add gdk-pixbuf-loader-rsvg BuildRequires: In general, gresource
  depends on it to build resource files with embedded .svg files.
  Adding the dependency in glib2-tools introduces a build cycle,
  so we avoid this.
- Split gnome-shell search provider to a separate package
  gnome-shell-search-provider-gnome-photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Support accessing photos from PicasaWeb (bgo#711563).
  + Undo-able deletion of photos and albums (bgo#720222).
  + Support accessing photos from DLNA media servers (bgo#728913).
  + Bugs fixed: bgo#733011, bgo#733216, bgo#733850, bgo#734398.
  + Updated translations.
- Add pkgconfig(libgdata) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Make it easier to support new sources (bgo#731865).
  + Drop some deprecated baggage (bgo#734762).
  + Guard against failure to resolve IDs (bgo#735746).
  + help: favorites are now marked using a star icon, not a heart
    icon (bgo#736186).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1411560000">- Update to version 3.14.0:
  + Preview-view: Disable the sliding transition (bgo#726505).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415793600">- Update to version 3.14.2:
  + Ensure that icon-only buttons get the 'image-button' style
    class (bgo#737310).
  + Fix crash when reading scale factor after window has been
    destroyed (bgo#738527).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Use a fallback name in the header bar during preview
    (bgo#733214).
  + Don't scale up thumbnails (bgo#740417).
  + Albums with only one photo look odd (bgo#740624).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1422014400">- Update to version 3.15.4:
  + Replace "Load More" button with edge hit detection
    (bgo#688566).
  + empty-results-box: Change text and icon for favorites
    (bgo#736551).
  + Allow setting the lock screen background from the preview
    (bgo#741590).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424433600">- Update to version 3.15.90:
  + Bugs fixed: bgo#711505, bgo#731391, bgo#731437, bgo#733213,
    bgo#737990, bgo#743853, bgo#744305, bgo#744309, bgo#744590.
  + Updated translations.
- Replace pkgconfig(gegl-0.2) BuildRequires with
  pkgconfig(gegl-0.3), following upstreams port.</changelog>
<changelog author="dimstar@opensuse.org" date="1425643200">- Update to version 3.15.91:
  + Bugs fixed: bgo#738527, bgo#740425, bgo#744841, bgo#745070,
    bgo#745071, bgo#745072.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Bugs fixed: bgo#745756, bgo#746104, bgo#746152.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Bugs fixed: bgo#746252, bgo#745972, bgo#747696.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446552000">- Update to version 3.16.3 (boo#953435):
  + Bugs fixed: bgo#688566, bgo#725508, bgo#734766, bgo#741593,
    bgo#746104, bgo#751106, bgo#756131, bgo#756221, bgo#757015,
    bgo#757199.
  + Updated translations.</changelog>

</package>
<package pkgid="169457f16ef75bd1256eb89ed5cb0628f3eb6e74c2960584dd7800d78c022fb3" name="gnome-photos" arch="x86_64">
    <version epoch="0" ver="3.16.3" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1389700800">- Update to version 3.11.4:
  + Bugs fixed: bgo#704947, bgo#709367, bgo#721402, bgo#721696.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1391688000">- Update to version 3.11.5:
  + Implement search.
  + Bugs fixed: bgo#715043, bgo#720404, bgo#720570, bgo#721402.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 3.11.90:
  + Implement search provider.
  + Turn into a DBus activated service.
  + Bugs fixed: bgo#723729.
  + Updated translations.
- Replace pkgconfig(tracker-miner-0.18) and
  pkgconfig(tracker-sparql-0.18) for pkgconfig(tracker-miner-1.0)
  and pkgconfig(tracker-sparql-1.0) BuildRequires.
- Desktopfile was renamed to org.gnome.Photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1393070400">- Add gnome-photos-fix-build-with-tracker-1.0.patch: Replace
  tracker-miner with tracker-control because TrackerMinerManager
  now lives in tracker-control. Replace
  pkgconfig(tracker-miner-1.0) for pkgconfig(tracker-control-1.0)
  BuildRequires following this.
- Add gnome-common BuildRequires and pass autoreconf due to above
  patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1394020800">- Update to version 3.11.91:
  + Bugs fixed: bgo#723664, bgo#725016, bgo#725095, bgo#725327,
    bgo#725328, bgo#725329, bgo#725589.
  + Updated translations.
- Drop gnome-photos-fix-build-with-tracker-1.0.patch: fixed
  upstream.
- Drop gnome-common BuildRequires and call to autoreconf, as we no
  longer carry patches.</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Bugs fixed: bgo#696802, bgo#698941, bgo#725587, bgo#725813,
    bgo#725934, bgo#726162, bgo#726165, bgo#726519.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Scale the thumbnails on HiDpi displays (bgo#726903).
  + Use o.fd.Tracker1.Extract.Priority interface to prioritize
    relevant types (bgo#726919).
  + Crash if Facebook credentials expired (bgo#727205).
  + Updated translations.
- Add itstool and yelp-tools BuildRequires: New dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1406116800">- Update to version 3.13.4:
  + New user help (bgo#711505).
  + Bugs fixed: bgo#708039, bgo#725156, bgo#726505, bgo#726685,
    bgo#726791, bgo#727392, bgo#729396, bgo#730822, bgo#731856,
    bgo#731865, bgo#732011, bgo#732676, bgo#733011, bgo#733355.
  + Updated translations.
- Add gdk-pixbuf-loader-rsvg BuildRequires: In general, gresource
  depends on it to build resource files with embedded .svg files.
  Adding the dependency in glib2-tools introduces a build cycle,
  so we avoid this.
- Split gnome-shell search provider to a separate package
  gnome-shell-search-provider-gnome-photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Support accessing photos from PicasaWeb (bgo#711563).
  + Undo-able deletion of photos and albums (bgo#720222).
  + Support accessing photos from DLNA media servers (bgo#728913).
  + Bugs fixed: bgo#733011, bgo#733216, bgo#733850, bgo#734398.
  + Updated translations.
- Add pkgconfig(libgdata) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Make it easier to support new sources (bgo#731865).
  + Drop some deprecated baggage (bgo#734762).
  + Guard against failure to resolve IDs (bgo#735746).
  + help: favorites are now marked using a star icon, not a heart
    icon (bgo#736186).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1411560000">- Update to version 3.14.0:
  + Preview-view: Disable the sliding transition (bgo#726505).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415793600">- Update to version 3.14.2:
  + Ensure that icon-only buttons get the 'image-button' style
    class (bgo#737310).
  + Fix crash when reading scale factor after window has been
    destroyed (bgo#738527).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Use a fallback name in the header bar during preview
    (bgo#733214).
  + Don't scale up thumbnails (bgo#740417).
  + Albums with only one photo look odd (bgo#740624).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1422014400">- Update to version 3.15.4:
  + Replace "Load More" button with edge hit detection
    (bgo#688566).
  + empty-results-box: Change text and icon for favorites
    (bgo#736551).
  + Allow setting the lock screen background from the preview
    (bgo#741590).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424433600">- Update to version 3.15.90:
  + Bugs fixed: bgo#711505, bgo#731391, bgo#731437, bgo#733213,
    bgo#737990, bgo#743853, bgo#744305, bgo#744309, bgo#744590.
  + Updated translations.
- Replace pkgconfig(gegl-0.2) BuildRequires with
  pkgconfig(gegl-0.3), following upstreams port.</changelog>
<changelog author="dimstar@opensuse.org" date="1425643200">- Update to version 3.15.91:
  + Bugs fixed: bgo#738527, bgo#740425, bgo#744841, bgo#745070,
    bgo#745071, bgo#745072.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Bugs fixed: bgo#745756, bgo#746104, bgo#746152.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Bugs fixed: bgo#746252, bgo#745972, bgo#747696.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446552000">- Update to version 3.16.3 (boo#953435):
  + Bugs fixed: bgo#688566, bgo#725508, bgo#734766, bgo#741593,
    bgo#746104, bgo#751106, bgo#756131, bgo#756221, bgo#757015,
    bgo#757199.
  + Updated translations.</changelog>

</package>
<package pkgid="ff4c29bcbf99ea52d4a7be4a2ae0bef0cc50014681f82fdbe79e5da722c05f3b" name="gnome-photos-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.3" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1389700800">- Update to version 3.11.4:
  + Bugs fixed: bgo#704947, bgo#709367, bgo#721402, bgo#721696.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1391688000">- Update to version 3.11.5:
  + Implement search.
  + Bugs fixed: bgo#715043, bgo#720404, bgo#720570, bgo#721402.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 3.11.90:
  + Implement search provider.
  + Turn into a DBus activated service.
  + Bugs fixed: bgo#723729.
  + Updated translations.
- Replace pkgconfig(tracker-miner-0.18) and
  pkgconfig(tracker-sparql-0.18) for pkgconfig(tracker-miner-1.0)
  and pkgconfig(tracker-sparql-1.0) BuildRequires.
- Desktopfile was renamed to org.gnome.Photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1393070400">- Add gnome-photos-fix-build-with-tracker-1.0.patch: Replace
  tracker-miner with tracker-control because TrackerMinerManager
  now lives in tracker-control. Replace
  pkgconfig(tracker-miner-1.0) for pkgconfig(tracker-control-1.0)
  BuildRequires following this.
- Add gnome-common BuildRequires and pass autoreconf due to above
  patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1394020800">- Update to version 3.11.91:
  + Bugs fixed: bgo#723664, bgo#725016, bgo#725095, bgo#725327,
    bgo#725328, bgo#725329, bgo#725589.
  + Updated translations.
- Drop gnome-photos-fix-build-with-tracker-1.0.patch: fixed
  upstream.
- Drop gnome-common BuildRequires and call to autoreconf, as we no
  longer carry patches.</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Bugs fixed: bgo#696802, bgo#698941, bgo#725587, bgo#725813,
    bgo#725934, bgo#726162, bgo#726165, bgo#726519.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Scale the thumbnails on HiDpi displays (bgo#726903).
  + Use o.fd.Tracker1.Extract.Priority interface to prioritize
    relevant types (bgo#726919).
  + Crash if Facebook credentials expired (bgo#727205).
  + Updated translations.
- Add itstool and yelp-tools BuildRequires: New dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1406116800">- Update to version 3.13.4:
  + New user help (bgo#711505).
  + Bugs fixed: bgo#708039, bgo#725156, bgo#726505, bgo#726685,
    bgo#726791, bgo#727392, bgo#729396, bgo#730822, bgo#731856,
    bgo#731865, bgo#732011, bgo#732676, bgo#733011, bgo#733355.
  + Updated translations.
- Add gdk-pixbuf-loader-rsvg BuildRequires: In general, gresource
  depends on it to build resource files with embedded .svg files.
  Adding the dependency in glib2-tools introduces a build cycle,
  so we avoid this.
- Split gnome-shell search provider to a separate package
  gnome-shell-search-provider-gnome-photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Support accessing photos from PicasaWeb (bgo#711563).
  + Undo-able deletion of photos and albums (bgo#720222).
  + Support accessing photos from DLNA media servers (bgo#728913).
  + Bugs fixed: bgo#733011, bgo#733216, bgo#733850, bgo#734398.
  + Updated translations.
- Add pkgconfig(libgdata) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Make it easier to support new sources (bgo#731865).
  + Drop some deprecated baggage (bgo#734762).
  + Guard against failure to resolve IDs (bgo#735746).
  + help: favorites are now marked using a star icon, not a heart
    icon (bgo#736186).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1411560000">- Update to version 3.14.0:
  + Preview-view: Disable the sliding transition (bgo#726505).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415793600">- Update to version 3.14.2:
  + Ensure that icon-only buttons get the 'image-button' style
    class (bgo#737310).
  + Fix crash when reading scale factor after window has been
    destroyed (bgo#738527).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Use a fallback name in the header bar during preview
    (bgo#733214).
  + Don't scale up thumbnails (bgo#740417).
  + Albums with only one photo look odd (bgo#740624).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1422014400">- Update to version 3.15.4:
  + Replace "Load More" button with edge hit detection
    (bgo#688566).
  + empty-results-box: Change text and icon for favorites
    (bgo#736551).
  + Allow setting the lock screen background from the preview
    (bgo#741590).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424433600">- Update to version 3.15.90:
  + Bugs fixed: bgo#711505, bgo#731391, bgo#731437, bgo#733213,
    bgo#737990, bgo#743853, bgo#744305, bgo#744309, bgo#744590.
  + Updated translations.
- Replace pkgconfig(gegl-0.2) BuildRequires with
  pkgconfig(gegl-0.3), following upstreams port.</changelog>
<changelog author="dimstar@opensuse.org" date="1425643200">- Update to version 3.15.91:
  + Bugs fixed: bgo#738527, bgo#740425, bgo#744841, bgo#745070,
    bgo#745071, bgo#745072.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Bugs fixed: bgo#745756, bgo#746104, bgo#746152.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Bugs fixed: bgo#746252, bgo#745972, bgo#747696.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446552000">- Update to version 3.16.3 (boo#953435):
  + Bugs fixed: bgo#688566, bgo#725508, bgo#734766, bgo#741593,
    bgo#746104, bgo#751106, bgo#756131, bgo#756221, bgo#757015,
    bgo#757199.
  + Updated translations.</changelog>

</package>
<package pkgid="4d3a176ee836732b6459249497f92d419adb68a54e96d630f01806af02980ccd" name="gnome-photos-debugsource" arch="x86_64">
    <version epoch="0" ver="3.16.3" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1389700800">- Update to version 3.11.4:
  + Bugs fixed: bgo#704947, bgo#709367, bgo#721402, bgo#721696.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1391688000">- Update to version 3.11.5:
  + Implement search.
  + Bugs fixed: bgo#715043, bgo#720404, bgo#720570, bgo#721402.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 3.11.90:
  + Implement search provider.
  + Turn into a DBus activated service.
  + Bugs fixed: bgo#723729.
  + Updated translations.
- Replace pkgconfig(tracker-miner-0.18) and
  pkgconfig(tracker-sparql-0.18) for pkgconfig(tracker-miner-1.0)
  and pkgconfig(tracker-sparql-1.0) BuildRequires.
- Desktopfile was renamed to org.gnome.Photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1393070400">- Add gnome-photos-fix-build-with-tracker-1.0.patch: Replace
  tracker-miner with tracker-control because TrackerMinerManager
  now lives in tracker-control. Replace
  pkgconfig(tracker-miner-1.0) for pkgconfig(tracker-control-1.0)
  BuildRequires following this.
- Add gnome-common BuildRequires and pass autoreconf due to above
  patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1394020800">- Update to version 3.11.91:
  + Bugs fixed: bgo#723664, bgo#725016, bgo#725095, bgo#725327,
    bgo#725328, bgo#725329, bgo#725589.
  + Updated translations.
- Drop gnome-photos-fix-build-with-tracker-1.0.patch: fixed
  upstream.
- Drop gnome-common BuildRequires and call to autoreconf, as we no
  longer carry patches.</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Bugs fixed: bgo#696802, bgo#698941, bgo#725587, bgo#725813,
    bgo#725934, bgo#726162, bgo#726165, bgo#726519.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Scale the thumbnails on HiDpi displays (bgo#726903).
  + Use o.fd.Tracker1.Extract.Priority interface to prioritize
    relevant types (bgo#726919).
  + Crash if Facebook credentials expired (bgo#727205).
  + Updated translations.
- Add itstool and yelp-tools BuildRequires: New dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1406116800">- Update to version 3.13.4:
  + New user help (bgo#711505).
  + Bugs fixed: bgo#708039, bgo#725156, bgo#726505, bgo#726685,
    bgo#726791, bgo#727392, bgo#729396, bgo#730822, bgo#731856,
    bgo#731865, bgo#732011, bgo#732676, bgo#733011, bgo#733355.
  + Updated translations.
- Add gdk-pixbuf-loader-rsvg BuildRequires: In general, gresource
  depends on it to build resource files with embedded .svg files.
  Adding the dependency in glib2-tools introduces a build cycle,
  so we avoid this.
- Split gnome-shell search provider to a separate package
  gnome-shell-search-provider-gnome-photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Support accessing photos from PicasaWeb (bgo#711563).
  + Undo-able deletion of photos and albums (bgo#720222).
  + Support accessing photos from DLNA media servers (bgo#728913).
  + Bugs fixed: bgo#733011, bgo#733216, bgo#733850, bgo#734398.
  + Updated translations.
- Add pkgconfig(libgdata) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Make it easier to support new sources (bgo#731865).
  + Drop some deprecated baggage (bgo#734762).
  + Guard against failure to resolve IDs (bgo#735746).
  + help: favorites are now marked using a star icon, not a heart
    icon (bgo#736186).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1411560000">- Update to version 3.14.0:
  + Preview-view: Disable the sliding transition (bgo#726505).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415793600">- Update to version 3.14.2:
  + Ensure that icon-only buttons get the 'image-button' style
    class (bgo#737310).
  + Fix crash when reading scale factor after window has been
    destroyed (bgo#738527).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Use a fallback name in the header bar during preview
    (bgo#733214).
  + Don't scale up thumbnails (bgo#740417).
  + Albums with only one photo look odd (bgo#740624).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1422014400">- Update to version 3.15.4:
  + Replace "Load More" button with edge hit detection
    (bgo#688566).
  + empty-results-box: Change text and icon for favorites
    (bgo#736551).
  + Allow setting the lock screen background from the preview
    (bgo#741590).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424433600">- Update to version 3.15.90:
  + Bugs fixed: bgo#711505, bgo#731391, bgo#731437, bgo#733213,
    bgo#737990, bgo#743853, bgo#744305, bgo#744309, bgo#744590.
  + Updated translations.
- Replace pkgconfig(gegl-0.2) BuildRequires with
  pkgconfig(gegl-0.3), following upstreams port.</changelog>
<changelog author="dimstar@opensuse.org" date="1425643200">- Update to version 3.15.91:
  + Bugs fixed: bgo#738527, bgo#740425, bgo#744841, bgo#745070,
    bgo#745071, bgo#745072.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Bugs fixed: bgo#745756, bgo#746104, bgo#746152.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Bugs fixed: bgo#746252, bgo#745972, bgo#747696.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446552000">- Update to version 3.16.3 (boo#953435):
  + Bugs fixed: bgo#688566, bgo#725508, bgo#734766, bgo#741593,
    bgo#746104, bgo#751106, bgo#756131, bgo#756221, bgo#757015,
    bgo#757199.
  + Updated translations.</changelog>

</package>
<package pkgid="915f4a13ec9450a1646abb69f83bd1512f41dbb1ee7b08966de3da64b708c5c0" name="gnome-photos-lang" arch="noarch">
    <version epoch="0" ver="3.16.3" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1389700800">- Update to version 3.11.4:
  + Bugs fixed: bgo#704947, bgo#709367, bgo#721402, bgo#721696.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1391688000">- Update to version 3.11.5:
  + Implement search.
  + Bugs fixed: bgo#715043, bgo#720404, bgo#720570, bgo#721402.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 3.11.90:
  + Implement search provider.
  + Turn into a DBus activated service.
  + Bugs fixed: bgo#723729.
  + Updated translations.
- Replace pkgconfig(tracker-miner-0.18) and
  pkgconfig(tracker-sparql-0.18) for pkgconfig(tracker-miner-1.0)
  and pkgconfig(tracker-sparql-1.0) BuildRequires.
- Desktopfile was renamed to org.gnome.Photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1393070400">- Add gnome-photos-fix-build-with-tracker-1.0.patch: Replace
  tracker-miner with tracker-control because TrackerMinerManager
  now lives in tracker-control. Replace
  pkgconfig(tracker-miner-1.0) for pkgconfig(tracker-control-1.0)
  BuildRequires following this.
- Add gnome-common BuildRequires and pass autoreconf due to above
  patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1394020800">- Update to version 3.11.91:
  + Bugs fixed: bgo#723664, bgo#725016, bgo#725095, bgo#725327,
    bgo#725328, bgo#725329, bgo#725589.
  + Updated translations.
- Drop gnome-photos-fix-build-with-tracker-1.0.patch: fixed
  upstream.
- Drop gnome-common BuildRequires and call to autoreconf, as we no
  longer carry patches.</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Bugs fixed: bgo#696802, bgo#698941, bgo#725587, bgo#725813,
    bgo#725934, bgo#726162, bgo#726165, bgo#726519.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Scale the thumbnails on HiDpi displays (bgo#726903).
  + Use o.fd.Tracker1.Extract.Priority interface to prioritize
    relevant types (bgo#726919).
  + Crash if Facebook credentials expired (bgo#727205).
  + Updated translations.
- Add itstool and yelp-tools BuildRequires: New dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1406116800">- Update to version 3.13.4:
  + New user help (bgo#711505).
  + Bugs fixed: bgo#708039, bgo#725156, bgo#726505, bgo#726685,
    bgo#726791, bgo#727392, bgo#729396, bgo#730822, bgo#731856,
    bgo#731865, bgo#732011, bgo#732676, bgo#733011, bgo#733355.
  + Updated translations.
- Add gdk-pixbuf-loader-rsvg BuildRequires: In general, gresource
  depends on it to build resource files with embedded .svg files.
  Adding the dependency in glib2-tools introduces a build cycle,
  so we avoid this.
- Split gnome-shell search provider to a separate package
  gnome-shell-search-provider-gnome-photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Support accessing photos from PicasaWeb (bgo#711563).
  + Undo-able deletion of photos and albums (bgo#720222).
  + Support accessing photos from DLNA media servers (bgo#728913).
  + Bugs fixed: bgo#733011, bgo#733216, bgo#733850, bgo#734398.
  + Updated translations.
- Add pkgconfig(libgdata) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Make it easier to support new sources (bgo#731865).
  + Drop some deprecated baggage (bgo#734762).
  + Guard against failure to resolve IDs (bgo#735746).
  + help: favorites are now marked using a star icon, not a heart
    icon (bgo#736186).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1411560000">- Update to version 3.14.0:
  + Preview-view: Disable the sliding transition (bgo#726505).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415793600">- Update to version 3.14.2:
  + Ensure that icon-only buttons get the 'image-button' style
    class (bgo#737310).
  + Fix crash when reading scale factor after window has been
    destroyed (bgo#738527).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Use a fallback name in the header bar during preview
    (bgo#733214).
  + Don't scale up thumbnails (bgo#740417).
  + Albums with only one photo look odd (bgo#740624).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1422014400">- Update to version 3.15.4:
  + Replace "Load More" button with edge hit detection
    (bgo#688566).
  + empty-results-box: Change text and icon for favorites
    (bgo#736551).
  + Allow setting the lock screen background from the preview
    (bgo#741590).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424433600">- Update to version 3.15.90:
  + Bugs fixed: bgo#711505, bgo#731391, bgo#731437, bgo#733213,
    bgo#737990, bgo#743853, bgo#744305, bgo#744309, bgo#744590.
  + Updated translations.
- Replace pkgconfig(gegl-0.2) BuildRequires with
  pkgconfig(gegl-0.3), following upstreams port.</changelog>
<changelog author="dimstar@opensuse.org" date="1425643200">- Update to version 3.15.91:
  + Bugs fixed: bgo#738527, bgo#740425, bgo#744841, bgo#745070,
    bgo#745071, bgo#745072.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Bugs fixed: bgo#745756, bgo#746104, bgo#746152.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Bugs fixed: bgo#746252, bgo#745972, bgo#747696.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446552000">- Update to version 3.16.3 (boo#953435):
  + Bugs fixed: bgo#688566, bgo#725508, bgo#734766, bgo#741593,
    bgo#746104, bgo#751106, bgo#756131, bgo#756221, bgo#757015,
    bgo#757199.
  + Updated translations.</changelog>

</package>
<package pkgid="11ff9e6ba93ba6c3895c2236511a6ef88cd9bf05c394320104ecd5843a8518a9" name="gnome-shell-search-provider-boxes" arch="x86_64">
    <version epoch="0" ver="3.16.2" rel="4.1"/>

<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Fix a regression that breaks express installation for Microsoft
    Windows.
  + Fix the issue of VM always going fullscreen on going back from
    properties.
  + Fix a potential crash.
  + A minor documentation fix.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 3.13.3:
  + Remove 'New' entry from global menu. It's context-sensitive and
    therefore does not belong there.
  + Specify exact Ctrl key in hint for ungrabbing..
  + Don't auto-fullscreen Boxes on launch.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405944000">- Update to version 3.13.4:
  + Don't reveal fullscreen topbar on pointer over edges to not
    interfere with user trying to reach WM decorations or apply
    edge gestures (as used in many modern operating systems) in the
    guest.
  + Don't show WM decorations in fullscreen. This is especially
    ugly in classic-mode where we have 3 buttons.
  + Drop weird and buggy custom thumbnail hilighting and enable it
    from gtk+ through latest libgd.
  + Fix max storage capacity going lower than min storage capacity.
  + Add F1 shortcut for help.
  + Allow selecting file from remote shares (for real this time).
  + Drop usage of deprecated APIs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.13.90:
  + Allow running boxes in their own seperate windows.
  + Handle initrd script injection method and therefore support for
    Debian express installation through libosinfo &gt;= 0.2.11.
  + Introduce media downloading feature. You can now enter an
    HTTP(S) URL to a remote media in wizard and Boxes will download
    it for you.
  + Allow editting the machine's name through the title in
    properties view.
  + More keyboard shortcuts:
  - Ctrl+N for launching wizard.
  - Ctrl+F for launching search.
  + If internet connection is required for express installation by
    an OS:
  - ensure it is available before allowing to start express
    installation.
  - Inform user of this requirement.
  + Replace hardcoded colors and background images with theme
    colors.
  + Menu button in selection mode disappeared recently due to a
    gtk+ bug, lets bring it back using a simple work around.
  + Fix support for non-kvm hosts.
  + Ensure minimum storage for an OS is actually known before using
    that information.
  + Improved maximum disk capacity calculation.
  + Warn on not enough space on the host to inscrease maximum disk
    size of VMs.
  + More information in DOAP file.
  + Updated translations.
- Add pkgconfig(libarchive) BuildRequires: new dependency.
- Add gnome-boxes-asneeded.patch: Fix building with
  - Wl,--as-needed.
- Add libtool BuildRequires and call to autoreconf: above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Add ability to create, delete, rename and revert to VM
    snapshots.
  + Don't ignore CDROM devices.
  + Fix build against '-Wl,--as-needed' linker flags.
  + Better error message on failure to start a VM.
  + Fix a regression that broke showing of 'empty boxes' UI.
  + Alignment fixes.
  + Updated translations.
- Drop gnome-boxes-asneeded.patch: Fixed upstream.
- Drop libtool BuildRequires and call to autoreconf: No longer
  needed.</changelog>
<changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 3.13.92:
  + Remove custom code for RTL back icon as gtk+ takes care of that
    for us now.
  + Fix hang on editting of box name.
  + Drop some redunant color hardcoding from theme.
  + Don't show snapshots option for machines that can't handle
    snapshots.
  + Don't show snapshots option for machines under installation.
  + Update CPU model for existing/old machines that were created by
    Boxes.
  + Make empty boxes image more visible.
  + Fix alignment of a empty boxes description label.
  + Fix Boxes ending up in weird states on hitting back button.
  + Close secondary window automatically if its machine
  - stops running.
  - is deleted.
  + Update screenshot on machine disconnection.
  + Fix checkboxes in selection mode by use of latest libgd.
  + Make D-Bus autolaunch work.
  + User help:
  - Add page about keyboard shortcuts.
  - Add page about gnome-continuous images.
  - Add page about snapshots.
  - Add pages about various options in properties view.
  - Updates/cleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Documentation improvements.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + Documentation improvements.
  + Fix gnome-shell search provider by updating .desktop ID.
  + Add padding to left and right of display header bar.
  + Fix handling of remote non-ISO (import) images.
  + Update CPU model also for boxes created through old Boxes on
    startup.
  + Replace user interface with bridge in existing domains on
    startup.
  + Fix download of logo files by direct use of actual HTTPS URLs
    as redirection is currently not handled by Boxes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + Remove redundant revealer from snapshots view.
  + Fix a potential crash on snapshot deletion.
  + Print a more descriptive warning on failing to rename a
    snapshot.
  + Report ovirt support in configure summary.
- Changes from version 3.14.1.2:
  + Fix crash on launching a VNC box.
  + Fix exit of wizard when going back from customization screen.
  + Don't start the VM after reverting to a snapshot unless it was
    running in foreground before the reversion operation.
  + Always show "Reverting to SNAPSHOT_NAME" message when reverting
    as we can never be sure about the speed of the operation.
  + Fix the issue of pause button still being available to user
    when a selected box(es) is already being paused and Boxes
    leading into interesting scenerios if user clicks on the
    button.
  + Fix the issue of change of box name from toolbar title not
    getting saved.
  + Fix cancellation of media setup and therefore wizard jumping to
    setup page even after user has cancelled creation of
    corresponding VM.
  + Continue wizard to next step on user hitting 'Enter' in URL
    entry.
  + Correctly handle HTTP(S) redirection.
  + Remove a now redundant work around.
  + Updated translations.
- Changes from version 3.14.1.1:
  + Fix express installation for Microsoft Windows.
  + Fix handling of downloads of unknown size.</changelog>
<changelog author="zaitor@opensuse.org" date="1423656000">- Update to version 3.14.3.1 (boo#916784):
  + Fix generated C files.
- Changes from version 3.14.3:
  + Fix express installation for Fedora and RHEL.
  + Add automated tests.
  + Fix import of VMs from system libvirt broker.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742400">- Update to version 3.15.2:
  + Properties view rework:
  - Now a separate dialog-like window.
  - Rename 'Login' section to 'General'.
  - Merge 'Display' secion into 'General' section.
  - Replace sidebar with:
    . system stats and controls in the 'System' section.
    . notebook tabs for each section.
  - Remove the vague 'Resize guest' property and instead tell
    SPICE to always try to scale the guest display to allocated
    size.
  - Remove vague auto-usbredirection option.
  - Replace use of vague term 'Virtualizer' with a more
    friendlier (and consistent) term, 'Broker'.
  - Show broker name instead of URL in properties view but do
    show broker URL in troubleshooting log.
  + Wizard view rework:
  - Now a separate dialog-like window.
  - Replace sidebar with step info in the title.
  - Present a popover with item-specific actions menu that
    includes:
    . Open in new window.
    . Favorite.
    . Pause.
    . Delete.
    . Properties when user:
  - right-clicks (or hits menu key) over an item.
  - clicks a new menu button in display view that replaces
    the 'properties' button.
  + Show box display resolution on window resize.
  + Automatically save/pause VMs running in background, except for
    ones under express installation.
  + Tell SPICE to also upscale the display when needed so that we
    don't end up with a very tiny box display on hidpi screens when
    no autoresolution is in effect (e.g boot loader screen or
    guests with no qxl/agent).
  + Download files to temporary location first. This fixes the
    issue of Boxes trying to use partially downloaded files.
  + Set 'USB' bus for mouse since the default PS/2 bus has been
    reported to be much slower.
  + Correctly handle the case of user clicking on a box that is
    being saved.
  + Explicitly disable HPET, based on input from libvirt and Qemu
    developers.
  + Report ovirt support in the configure summary.
  + Don't spin spinner on paused machines.
  + If Boxes is launched with SOUP_DEBUG environment variable set,
    attach a logger to libsoup session.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742401">- Update to version 3.15.3:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are:
  - Ctrl+Alt+Backspace
  - Ctrl+Alt+F1
  - Ctrl+Alt+F2
  - Ctrl+Alt+F7
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow customization
    of resources before a box is created.
  + As a USB device is no longer available on the host after being
    redirected to guest, do not present keyboards and mice to user
    for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.
- Add pkgconfig(libusb-1.0) BuildRequires: New dependency.</changelog>
<changelog author="badshah400@gmail.com" date="1423742402">- Update to version 3.15.4:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are: Ctrl+Alt+Backspace, Ctrl+Alt+F1, Ctrl+Alt+F2,
    Ctrl+Alt+F7.
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow
    customization of resources before a box is created.
  + As a USB device is no longer available on the host after
    being redirected to guest, do not present keyboards and
    mice to user for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + New cool first experience screen.
  + Drop intro page from wizard now that we have a cool first
    experience screen.
  + Show step titles rather than numbers in wizard titlebar.
  + Ensure titlebar always has a title.
  + Inform users how to release the keyboard grab.
  + Don't autosave a VM when view/editing its propties.
  + Show normal entries for editable string properties instead of
    our custom widget that shows a button to edit.
  + Ensure selection-mode exit on launching properties view.
  + URL entry in wizard:
  - Provide completion based on media URLs known to libosinfo.
  - More thorough validation of local URLs.
  - Don't enable 'Continue' for invalid URLs.
  - Better explain expected URLs.
  + Fix and improve snapshot naming.
  + Add automated UI tests.
  + Import of system libvirt VMs:
  - Fix import failing with a weird 'Empty location' error
    message.
  - Don't needlessly chmod disk (and hence launch annoying
    policykit dialog).
  - Replace network interface so imported VM can be started
    successfully.
  + Set proper accessible name on windows.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Cache express install toggle, username, password and product
    key for every media. No need to keep product keys in a separate
    file and having to paste them each time you create a windows
    box anymore.
  + Beautify:
  - USB devices list
  - Snapshots list
  - Resource graphs
  + Friendlier 'no snapshots' view.
  + Fix invisible separators in menus.
  + Fix some label alignments.
  + Fix main window hanging in weird blank state on launching new
    windows.
  + Don't present useless 'Open in new window' option when box
    already has its own window.
  + Connect to local libvirt machines' SPICE display through a
    file descriptor. While this alone doesn't fix the issue of
    spice connection being exposed to other local users yet, all
    work in Boxes is done for that.
  + Mark a few forgotten UI strings for translation.
  + Fix a few UI strings.
  + Ellipsize URL in the middle to ensure the hostname and
    filename are visible.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.92:
  + Notifications no longer timeout when mouse is hovering above
    them.
  + Show correct favorite option in box actions popup menu.
  + Only show resolution overlay on actual resize.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 3.16.0:
  + Ensure wizard page titles are translated.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Support home directories on filesystems without (good) O_DIRECT
    support.
  + Fix the issue of wizard remaining in seconardary views when
    cancelled through 'Esc' key.
  + Show Boxes in menus of other desktops than GNOME, too.
  + Only add USB keyboard and mouse to new VMs they are supported
    out of the box by the guest OS. This fixes installation of
    Windows XP.
  + Gracefully handle case of no cpu defined in libvirt VMs.
  + Load correct screenshot for shutdown machines.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Provide symbolic icon.
  + Case-insensitive check for file extension.
  + Remove redundant work-around for Windows XP installer.
  + Ensure "Saving…" status goes away on error.
  + Only autosave running machines.
  + Assign 2G RAM to VMs by default.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446120000">- Stop passing --enable-smartcard to configure, we are using SLE
  base for Leap, and we are missing smartcard support (boo#952712).</changelog>

</package>
<package pkgid="b66c5dd6563282247e221c29e103b1dfd24d20b5610fe09048e80fa0f89e9d76" name="gnome-shell-search-provider-boxes-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.2" rel="4.1"/>

<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Fix a regression that breaks express installation for Microsoft
    Windows.
  + Fix the issue of VM always going fullscreen on going back from
    properties.
  + Fix a potential crash.
  + A minor documentation fix.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405166400">- Update to version 3.13.3:
  + Remove 'New' entry from global menu. It's context-sensitive and
    therefore does not belong there.
  + Specify exact Ctrl key in hint for ungrabbing..
  + Don't auto-fullscreen Boxes on launch.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1405944000">- Update to version 3.13.4:
  + Don't reveal fullscreen topbar on pointer over edges to not
    interfere with user trying to reach WM decorations or apply
    edge gestures (as used in many modern operating systems) in the
    guest.
  + Don't show WM decorations in fullscreen. This is especially
    ugly in classic-mode where we have 3 buttons.
  + Drop weird and buggy custom thumbnail hilighting and enable it
    from gtk+ through latest libgd.
  + Fix max storage capacity going lower than min storage capacity.
  + Add F1 shortcut for help.
  + Allow selecting file from remote shares (for real this time).
  + Drop usage of deprecated APIs.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 3.13.90:
  + Allow running boxes in their own seperate windows.
  + Handle initrd script injection method and therefore support for
    Debian express installation through libosinfo &gt;= 0.2.11.
  + Introduce media downloading feature. You can now enter an
    HTTP(S) URL to a remote media in wizard and Boxes will download
    it for you.
  + Allow editting the machine's name through the title in
    properties view.
  + More keyboard shortcuts:
  - Ctrl+N for launching wizard.
  - Ctrl+F for launching search.
  + If internet connection is required for express installation by
    an OS:
  - ensure it is available before allowing to start express
    installation.
  - Inform user of this requirement.
  + Replace hardcoded colors and background images with theme
    colors.
  + Menu button in selection mode disappeared recently due to a
    gtk+ bug, lets bring it back using a simple work around.
  + Fix support for non-kvm hosts.
  + Ensure minimum storage for an OS is actually known before using
    that information.
  + Improved maximum disk capacity calculation.
  + Warn on not enough space on the host to inscrease maximum disk
    size of VMs.
  + More information in DOAP file.
  + Updated translations.
- Add pkgconfig(libarchive) BuildRequires: new dependency.
- Add gnome-boxes-asneeded.patch: Fix building with
  - Wl,--as-needed.
- Add libtool BuildRequires and call to autoreconf: above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Add ability to create, delete, rename and revert to VM
    snapshots.
  + Don't ignore CDROM devices.
  + Fix build against '-Wl,--as-needed' linker flags.
  + Better error message on failure to start a VM.
  + Fix a regression that broke showing of 'empty boxes' UI.
  + Alignment fixes.
  + Updated translations.
- Drop gnome-boxes-asneeded.patch: Fixed upstream.
- Drop libtool BuildRequires and call to autoreconf: No longer
  needed.</changelog>
<changelog author="zaitor@opensuse.org" date="1410868800">- Update to version 3.13.92:
  + Remove custom code for RTL back icon as gtk+ takes care of that
    for us now.
  + Fix hang on editting of box name.
  + Drop some redunant color hardcoding from theme.
  + Don't show snapshots option for machines that can't handle
    snapshots.
  + Don't show snapshots option for machines under installation.
  + Update CPU model for existing/old machines that were created by
    Boxes.
  + Make empty boxes image more visible.
  + Fix alignment of a empty boxes description label.
  + Fix Boxes ending up in weird states on hitting back button.
  + Close secondary window automatically if its machine
  - stops running.
  - is deleted.
  + Update screenshot on machine disconnection.
  + Fix checkboxes in selection mode by use of latest libgd.
  + Make D-Bus autolaunch work.
  + User help:
  - Add page about keyboard shortcuts.
  - Add page about gnome-continuous images.
  - Add page about snapshots.
  - Add pages about various options in properties view.
  - Updates/cleanups.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Documentation improvements.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + Documentation improvements.
  + Fix gnome-shell search provider by updating .desktop ID.
  + Add padding to left and right of display header bar.
  + Fix handling of remote non-ISO (import) images.
  + Update CPU model also for boxes created through old Boxes on
    startup.
  + Replace user interface with bridge in existing domains on
    startup.
  + Fix download of logo files by direct use of actual HTTPS URLs
    as redirection is currently not handled by Boxes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + Remove redundant revealer from snapshots view.
  + Fix a potential crash on snapshot deletion.
  + Print a more descriptive warning on failing to rename a
    snapshot.
  + Report ovirt support in configure summary.
- Changes from version 3.14.1.2:
  + Fix crash on launching a VNC box.
  + Fix exit of wizard when going back from customization screen.
  + Don't start the VM after reverting to a snapshot unless it was
    running in foreground before the reversion operation.
  + Always show "Reverting to SNAPSHOT_NAME" message when reverting
    as we can never be sure about the speed of the operation.
  + Fix the issue of pause button still being available to user
    when a selected box(es) is already being paused and Boxes
    leading into interesting scenerios if user clicks on the
    button.
  + Fix the issue of change of box name from toolbar title not
    getting saved.
  + Fix cancellation of media setup and therefore wizard jumping to
    setup page even after user has cancelled creation of
    corresponding VM.
  + Continue wizard to next step on user hitting 'Enter' in URL
    entry.
  + Correctly handle HTTP(S) redirection.
  + Remove a now redundant work around.
  + Updated translations.
- Changes from version 3.14.1.1:
  + Fix express installation for Microsoft Windows.
  + Fix handling of downloads of unknown size.</changelog>
<changelog author="zaitor@opensuse.org" date="1423656000">- Update to version 3.14.3.1 (boo#916784):
  + Fix generated C files.
- Changes from version 3.14.3:
  + Fix express installation for Fedora and RHEL.
  + Add automated tests.
  + Fix import of VMs from system libvirt broker.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742400">- Update to version 3.15.2:
  + Properties view rework:
  - Now a separate dialog-like window.
  - Rename 'Login' section to 'General'.
  - Merge 'Display' secion into 'General' section.
  - Replace sidebar with:
    . system stats and controls in the 'System' section.
    . notebook tabs for each section.
  - Remove the vague 'Resize guest' property and instead tell
    SPICE to always try to scale the guest display to allocated
    size.
  - Remove vague auto-usbredirection option.
  - Replace use of vague term 'Virtualizer' with a more
    friendlier (and consistent) term, 'Broker'.
  - Show broker name instead of URL in properties view but do
    show broker URL in troubleshooting log.
  + Wizard view rework:
  - Now a separate dialog-like window.
  - Replace sidebar with step info in the title.
  - Present a popover with item-specific actions menu that
    includes:
    . Open in new window.
    . Favorite.
    . Pause.
    . Delete.
    . Properties when user:
  - right-clicks (or hits menu key) over an item.
  - clicks a new menu button in display view that replaces
    the 'properties' button.
  + Show box display resolution on window resize.
  + Automatically save/pause VMs running in background, except for
    ones under express installation.
  + Tell SPICE to also upscale the display when needed so that we
    don't end up with a very tiny box display on hidpi screens when
    no autoresolution is in effect (e.g boot loader screen or
    guests with no qxl/agent).
  + Download files to temporary location first. This fixes the
    issue of Boxes trying to use partially downloaded files.
  + Set 'USB' bus for mouse since the default PS/2 bus has been
    reported to be much slower.
  + Correctly handle the case of user clicking on a box that is
    being saved.
  + Explicitly disable HPET, based on input from libvirt and Qemu
    developers.
  + Report ovirt support in the configure summary.
  + Don't spin spinner on paused machines.
  + If Boxes is launched with SOUP_DEBUG environment variable set,
    attach a logger to libsoup session.</changelog>
<changelog author="zaitor@opensuse.org" date="1423742401">- Update to version 3.15.3:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are:
  - Ctrl+Alt+Backspace
  - Ctrl+Alt+F1
  - Ctrl+Alt+F2
  - Ctrl+Alt+F7
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow customization
    of resources before a box is created.
  + As a USB device is no longer available on the host after being
    redirected to guest, do not present keyboards and mice to user
    for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.
- Add pkgconfig(libusb-1.0) BuildRequires: New dependency.</changelog>
<changelog author="badshah400@gmail.com" date="1423742402">- Update to version 3.15.4:
  + Add a menu button that, when clicked pops up a menu to allow
    user to send system key combos to guest. Currently supported
    combos are: Ctrl+Alt+Backspace, Ctrl+Alt+F1, Ctrl+Alt+F2,
    Ctrl+Alt+F7.
  + Drop all nested dialogs by use of notifications and GtkStack
    widget. This also implies that we now only allow
    customization of resources before a box is created.
  + As a USB device is no longer available on the host after
    being redirected to guest, do not present keyboards and
    mice to user for redirection.
  + Place fullscreen button before others in display headerbar.
    This is for consistency with UI mockups and other apps.
  + Show correct number of steps in wizard title.
  + Show notifications on correct window in properties and wizard
    views.
  + Apply appropriate theme to 'Force shutdown' button.
  + Correctly restore notebook page in properties view.
  + Don't show empty pages in properties view.
  + Bigger properties and wizard windows.
  + Add a USB keyboard to new domains.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + New cool first experience screen.
  + Drop intro page from wizard now that we have a cool first
    experience screen.
  + Show step titles rather than numbers in wizard titlebar.
  + Ensure titlebar always has a title.
  + Inform users how to release the keyboard grab.
  + Don't autosave a VM when view/editing its propties.
  + Show normal entries for editable string properties instead of
    our custom widget that shows a button to edit.
  + Ensure selection-mode exit on launching properties view.
  + URL entry in wizard:
  - Provide completion based on media URLs known to libosinfo.
  - More thorough validation of local URLs.
  - Don't enable 'Continue' for invalid URLs.
  - Better explain expected URLs.
  + Fix and improve snapshot naming.
  + Add automated UI tests.
  + Import of system libvirt VMs:
  - Fix import failing with a weird 'Empty location' error
    message.
  - Don't needlessly chmod disk (and hence launch annoying
    policykit dialog).
  - Replace network interface so imported VM can be started
    successfully.
  + Set proper accessible name on windows.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Cache express install toggle, username, password and product
    key for every media. No need to keep product keys in a separate
    file and having to paste them each time you create a windows
    box anymore.
  + Beautify:
  - USB devices list
  - Snapshots list
  - Resource graphs
  + Friendlier 'no snapshots' view.
  + Fix invisible separators in menus.
  + Fix some label alignments.
  + Fix main window hanging in weird blank state on launching new
    windows.
  + Don't present useless 'Open in new window' option when box
    already has its own window.
  + Connect to local libvirt machines' SPICE display through a
    file descriptor. While this alone doesn't fix the issue of
    spice connection being exposed to other local users yet, all
    work in Boxes is done for that.
  + Mark a few forgotten UI strings for translation.
  + Fix a few UI strings.
  + Ellipsize URL in the middle to ensure the hostname and
    filename are visible.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.92:
  + Notifications no longer timeout when mouse is hovering above
    them.
  + Show correct favorite option in box actions popup menu.
  + Only show resolution overlay on actual resize.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 3.16.0:
  + Ensure wizard page titles are translated.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Support home directories on filesystems without (good) O_DIRECT
    support.
  + Fix the issue of wizard remaining in seconardary views when
    cancelled through 'Esc' key.
  + Show Boxes in menus of other desktops than GNOME, too.
  + Only add USB keyboard and mouse to new VMs they are supported
    out of the box by the guest OS. This fixes installation of
    Windows XP.
  + Gracefully handle case of no cpu defined in libvirt VMs.
  + Load correct screenshot for shutdown machines.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Provide symbolic icon.
  + Case-insensitive check for file extension.
  + Remove redundant work-around for Windows XP installer.
  + Ensure "Saving…" status goes away on error.
  + Only autosave running machines.
  + Assign 2G RAM to VMs by default.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446120000">- Stop passing --enable-smartcard to configure, we are using SLE
  base for Leap, and we are missing smartcard support (boo#952712).</changelog>

</package>
<package pkgid="0402016f6766d611480fda340f84993e44f00dfc4687b6fc97b5f30bb78d0f9d" name="gnome-shell-search-provider-gnome-photos" arch="x86_64">
    <version epoch="0" ver="3.16.3" rel="5.1"/>

<changelog author="dimstar@opensuse.org" date="1389700800">- Update to version 3.11.4:
  + Bugs fixed: bgo#704947, bgo#709367, bgo#721402, bgo#721696.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1391688000">- Update to version 3.11.5:
  + Implement search.
  + Bugs fixed: bgo#715043, bgo#720404, bgo#720570, bgo#721402.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 3.11.90:
  + Implement search provider.
  + Turn into a DBus activated service.
  + Bugs fixed: bgo#723729.
  + Updated translations.
- Replace pkgconfig(tracker-miner-0.18) and
  pkgconfig(tracker-sparql-0.18) for pkgconfig(tracker-miner-1.0)
  and pkgconfig(tracker-sparql-1.0) BuildRequires.
- Desktopfile was renamed to org.gnome.Photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1393070400">- Add gnome-photos-fix-build-with-tracker-1.0.patch: Replace
  tracker-miner with tracker-control because TrackerMinerManager
  now lives in tracker-control. Replace
  pkgconfig(tracker-miner-1.0) for pkgconfig(tracker-control-1.0)
  BuildRequires following this.
- Add gnome-common BuildRequires and pass autoreconf due to above
  patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1394020800">- Update to version 3.11.91:
  + Bugs fixed: bgo#723664, bgo#725016, bgo#725095, bgo#725327,
    bgo#725328, bgo#725329, bgo#725589.
  + Updated translations.
- Drop gnome-photos-fix-build-with-tracker-1.0.patch: fixed
  upstream.
- Drop gnome-common BuildRequires and call to autoreconf, as we no
  longer carry patches.</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Bugs fixed: bgo#696802, bgo#698941, bgo#725587, bgo#725813,
    bgo#725934, bgo#726162, bgo#726165, bgo#726519.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395662400">- Update to version 3.12.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Scale the thumbnails on HiDpi displays (bgo#726903).
  + Use o.fd.Tracker1.Extract.Priority interface to prioritize
    relevant types (bgo#726919).
  + Crash if Facebook credentials expired (bgo#727205).
  + Updated translations.
- Add itstool and yelp-tools BuildRequires: New dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1406116800">- Update to version 3.13.4:
  + New user help (bgo#711505).
  + Bugs fixed: bgo#708039, bgo#725156, bgo#726505, bgo#726685,
    bgo#726791, bgo#727392, bgo#729396, bgo#730822, bgo#731856,
    bgo#731865, bgo#732011, bgo#732676, bgo#733011, bgo#733355.
  + Updated translations.
- Add gdk-pixbuf-loader-rsvg BuildRequires: In general, gresource
  depends on it to build resource files with embedded .svg files.
  Adding the dependency in glib2-tools introduces a build cycle,
  so we avoid this.
- Split gnome-shell search provider to a separate package
  gnome-shell-search-provider-gnome-photos.</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Support accessing photos from PicasaWeb (bgo#711563).
  + Undo-able deletion of photos and albums (bgo#720222).
  + Support accessing photos from DLNA media servers (bgo#728913).
  + Bugs fixed: bgo#733011, bgo#733216, bgo#733850, bgo#734398.
  + Updated translations.
- Add pkgconfig(libgdata) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Make it easier to support new sources (bgo#731865).
  + Drop some deprecated baggage (bgo#734762).
  + Guard against failure to resolve IDs (bgo#735746).
  + help: favorites are now marked using a star icon, not a heart
    icon (bgo#736186).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1411560000">- Update to version 3.14.0:
  + Preview-view: Disable the sliding transition (bgo#726505).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1415793600">- Update to version 3.14.2:
  + Ensure that icon-only buttons get the 'image-button' style
    class (bgo#737310).
  + Fix crash when reading scale factor after window has been
    destroyed (bgo#738527).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Use a fallback name in the header bar during preview
    (bgo#733214).
  + Don't scale up thumbnails (bgo#740417).
  + Albums with only one photo look odd (bgo#740624).
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1422014400">- Update to version 3.15.4:
  + Replace "Load More" button with edge hit detection
    (bgo#688566).
  + empty-results-box: Change text and icon for favorites
    (bgo#736551).
  + Allow setting the lock screen background from the preview
    (bgo#741590).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424433600">- Update to version 3.15.90:
  + Bugs fixed: bgo#711505, bgo#731391, bgo#731437, bgo#733213,
    bgo#737990, bgo#743853, bgo#744305, bgo#744309, bgo#744590.
  + Updated translations.
- Replace pkgconfig(gegl-0.2) BuildRequires with
  pkgconfig(gegl-0.3), following upstreams port.</changelog>
<changelog author="dimstar@opensuse.org" date="1425643200">- Update to version 3.15.91:
  + Bugs fixed: bgo#738527, bgo#740425, bgo#744841, bgo#745070,
    bgo#745071, bgo#745072.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Bugs fixed: bgo#745756, bgo#746104, bgo#746152.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431518400">- Update to version 3.16.2:
  + Bugs fixed: bgo#746252, bgo#745972, bgo#747696.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1446552000">- Update to version 3.16.3 (boo#953435):
  + Bugs fixed: bgo#688566, bgo#725508, bgo#734766, bgo#741593,
    bgo#746104, bgo#751106, bgo#756131, bgo#756221, bgo#757015,
    bgo#757199.
  + Updated translations.</changelog>

</package>
<package pkgid="a6906ee6d686c5bfe6084466db1405f35bc3ef8a9f4e41ec1ad963f50b6b4d90" name="gnome-software" arch="src">
    <version epoch="0" ver="3.16.6" rel="4.1"/>

<changelog author="dimstar@opensuse.org" date="1412683200">- Add gnome-software-nouser-proxy.patch: Do not pass proxy settings
  between user session and packagekitd. openSUSE does not grant the
  required polkit privileges, as user settings should not have an
  impact on the package manager in our view. The proxy settings for
  packagekitd are handled by libzypp/libproxy and are loaded from
  yast proxy settings.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + New Features:
  - Load 128x128 icons if they are installed on HiDPI hardware.
  - Try to load HiDPI screenshots on HiDPI hardware.
  + Bugfix:
  - Always load the fallback icon at 64x64 size.
  - Avoid flickering the spinner during find-as-you-type.
  - Avoid restarting spinner animation when repeatedly calling
    start.
  - Clear all existing applications if the store was invalidated.
  - Destroy the sources dialog when it's closed.
  - Disable text shadow for the updates counter label.
  - Don't allow cancelling appstream plugin plugin startup.
  - Don't crash when the moduleset data is not yet installed.
  - Don't ignore duplicate searches.
  - Don't show addons that are in unavailable state.
  - Don't warn for cancelled operations.
  - First run dialog nonresizable and corrected margins.
  - Fix a race with displaying results from shell search
    provider.
  - Make --details work again.
  - Make search cancelling quicker.
  - Plug a leak when adding apps to the list of updates.
  - Plug a memory leak when refining addons.
  - Reload the all the shells when the AppStream metadata
    changes.
  + Updated translations.
- Bump gs_plugin_api to 7, following upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1414670400">- Split libzypp-plugin-appdata out of gnome-software to be able to
  easier maintain updates.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + New Features:
  - Add the origin as a keyword if it's not the majority source.
  - Support the LOCAL AppStream icon type.
  + Bugfix:
  - Do not fail to get popular apps if the AppStream data is
    invalid.
  - Do not show a random white line above the star rating widget.
  - Do not show empty app boxes if no popular results are
    available.
  - Do not try to download local web-app icons.
  - Fix screenshot loading with --details.
  - Use blue stars for the user-ratings rather than yellow/gold.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 3.14.3 (boo#916784):
  + Bugfix:
  - Fix several possible crashes when clicking the back button.
  - Fix a crash in the screenshot loader.
  - Show an error message when we fail to load details about a
    local file.
  - Make sure back button always leads back to overview.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038401">- Update to version 3.15.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038402">- Update to version 3.15.4:
  + Add support for unavailable packages.
  + Use new API from libappstream-glib for tokenizing the search
    string.
  + Bugfixes:
  - Add some more prefer-GTK rules for applications that ship
    both.
  - Delay the updates-changed notification for a few seconds.
  - Do case-insensitive searching of suitable keywords.
  - Fix color of add button on add to app folder dialog.
  - Fix searching for keyworks with special chars.
  - Update Inkscape featured splash.
  - Use an AsIcon internally to simplify a lot of complex code.
  + Updated translations.
- Rebase gnome-software-add-default-yast-appfolder.patch and
  gnome-software-nouser-proxy.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038403">- Update to version 3.15.90:
  + Add a new panel for displaying session service results.
  + Add a new version of the Modify interface.
  + Require AppData for all available packages.
  + Use the new mockups for the 3rd party source install dialogs.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Enable kinetic scrolling in updates dialog.
  + This release fixes the following bug:
  - Always ensure that the back entry focus widget is valid.
  - Don't show small screenshots on HiDPI hardware.
  - Fix a crash when starting GNOME Software for the first time.
  - Only show compatible projects when getting the featured
    list.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + This unstable release adds the following features:
  - React to theme changes.
  - Rebase the HighContrast theme.
  + This release fixes the following bug:
  - Fix HiDPI scale factor calculation.
  - Align section headings in all views.
  - Fix 'installed' overlays when using the HighContrast theme.
  - Fall back to showing the top level category when no sub
    category exists.
  - Fix a crash when using the pending applications feature.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.16.1:
  + Correctly save HiDPI images to HiDPI directories.
  + Scroll the contents of the error message dialog.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Remove redundant OK button from the updates installed
    notification.
  + Display a better human readable title for printer drivers.
  + Show a better UI for offline update failure dialog.
  + Set default actions for the update done notifications.
  + Allow searching for packages via the API without appdata.
- Remove HighContrast %icon_theme_cache_post(un) calls, as Symbolic
  icons have replaced them.</changelog>
<changelog author="zaitor@opensuse.org" date="1433505600">- Update to version 3.16.3:
  + Fix a crash in the screenshot loader.
  + Fix a crash when installing rpms that lack description.
  + Fix a crash under Wayland when installing codecs.
  + Avoid scaled up fonts on non-hidpi displays.
  + Wrap long descriptions in the update dialog.
  + Reduce network timeouts to one minute.
  + Several improvements to the sources dialog.
  + Show better human readable names when searching for font
    scripts.
  + Updated translations.
- Add iso-codes Requires: New runtime dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1434283200">- Update to version 3.16.4:
  + Fix a frequent crash in appstream plugin.
  + Fix a critical warning when opening the app folder dialog.
  + Fix a possible crash when changing the download-updates option
    in gsettings.
  + Hide updates UI on managed systems.
  + Improve the error dialog for failed offline updates.
  + Workaround text coming up as selected in the updates dialog.
- Add pkgconfig(polkit-gobject-1) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.5:
  + Show installation progress when installing apps.
  + Several improvements to featured app banners.
  + Fix a possible crash when launching an installed app.
  + Update the styling of the history dialog to make sure
    unclickable rows don't appear clickable.
  + Make sure apps that aren't installable are properly hidden in
    the category view.
  + Fix an issue that caused "Source: Unknown" to be shown in the
    app details view.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Do not ship gnome-software-local-file.desktop: gnome-software is
  not yet able to handle local RPM files on openSUSE (boo#941862).</changelog>
<changelog author="zaitor@opensuse.org" date="1444392000">- Add missing %{name}-lang Recommends: We want translations!</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.16.6:
  + Do not force the cache refresh and delete otherwise valid
    packages when downloading updates.
  + Fix several potential crashes when navigating and when
    installing.
  + Prefer the gtk version of gimagereader over the qt5 version.
  + Improve failure code path when install or remove fails.</changelog>
<changelog author="dimstar@opensuse.org" date="1446206400">- Add gnome-software-xterm-is-not-removable.patch: XTerm is a
  system dependency and must not be removable (boo#906598,
  boo#906687). As Leap is based on SLE, we did not inherit the
  split of xterm and xterm-bin.</changelog>

</package>
<package pkgid="e963fcb67b5f035c46cab326e9d038b8833cd8718b05b46cc4d61d6a51b60f4f" name="gnome-software" arch="x86_64">
    <version epoch="0" ver="3.16.6" rel="4.1"/>

<changelog author="dimstar@opensuse.org" date="1412683200">- Add gnome-software-nouser-proxy.patch: Do not pass proxy settings
  between user session and packagekitd. openSUSE does not grant the
  required polkit privileges, as user settings should not have an
  impact on the package manager in our view. The proxy settings for
  packagekitd are handled by libzypp/libproxy and are loaded from
  yast proxy settings.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + New Features:
  - Load 128x128 icons if they are installed on HiDPI hardware.
  - Try to load HiDPI screenshots on HiDPI hardware.
  + Bugfix:
  - Always load the fallback icon at 64x64 size.
  - Avoid flickering the spinner during find-as-you-type.
  - Avoid restarting spinner animation when repeatedly calling
    start.
  - Clear all existing applications if the store was invalidated.
  - Destroy the sources dialog when it's closed.
  - Disable text shadow for the updates counter label.
  - Don't allow cancelling appstream plugin plugin startup.
  - Don't crash when the moduleset data is not yet installed.
  - Don't ignore duplicate searches.
  - Don't show addons that are in unavailable state.
  - Don't warn for cancelled operations.
  - First run dialog nonresizable and corrected margins.
  - Fix a race with displaying results from shell search
    provider.
  - Make --details work again.
  - Make search cancelling quicker.
  - Plug a leak when adding apps to the list of updates.
  - Plug a memory leak when refining addons.
  - Reload the all the shells when the AppStream metadata
    changes.
  + Updated translations.
- Bump gs_plugin_api to 7, following upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1414670400">- Split libzypp-plugin-appdata out of gnome-software to be able to
  easier maintain updates.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + New Features:
  - Add the origin as a keyword if it's not the majority source.
  - Support the LOCAL AppStream icon type.
  + Bugfix:
  - Do not fail to get popular apps if the AppStream data is
    invalid.
  - Do not show a random white line above the star rating widget.
  - Do not show empty app boxes if no popular results are
    available.
  - Do not try to download local web-app icons.
  - Fix screenshot loading with --details.
  - Use blue stars for the user-ratings rather than yellow/gold.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 3.14.3 (boo#916784):
  + Bugfix:
  - Fix several possible crashes when clicking the back button.
  - Fix a crash in the screenshot loader.
  - Show an error message when we fail to load details about a
    local file.
  - Make sure back button always leads back to overview.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038401">- Update to version 3.15.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038402">- Update to version 3.15.4:
  + Add support for unavailable packages.
  + Use new API from libappstream-glib for tokenizing the search
    string.
  + Bugfixes:
  - Add some more prefer-GTK rules for applications that ship
    both.
  - Delay the updates-changed notification for a few seconds.
  - Do case-insensitive searching of suitable keywords.
  - Fix color of add button on add to app folder dialog.
  - Fix searching for keyworks with special chars.
  - Update Inkscape featured splash.
  - Use an AsIcon internally to simplify a lot of complex code.
  + Updated translations.
- Rebase gnome-software-add-default-yast-appfolder.patch and
  gnome-software-nouser-proxy.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038403">- Update to version 3.15.90:
  + Add a new panel for displaying session service results.
  + Add a new version of the Modify interface.
  + Require AppData for all available packages.
  + Use the new mockups for the 3rd party source install dialogs.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Enable kinetic scrolling in updates dialog.
  + This release fixes the following bug:
  - Always ensure that the back entry focus widget is valid.
  - Don't show small screenshots on HiDPI hardware.
  - Fix a crash when starting GNOME Software for the first time.
  - Only show compatible projects when getting the featured
    list.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + This unstable release adds the following features:
  - React to theme changes.
  - Rebase the HighContrast theme.
  + This release fixes the following bug:
  - Fix HiDPI scale factor calculation.
  - Align section headings in all views.
  - Fix 'installed' overlays when using the HighContrast theme.
  - Fall back to showing the top level category when no sub
    category exists.
  - Fix a crash when using the pending applications feature.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.16.1:
  + Correctly save HiDPI images to HiDPI directories.
  + Scroll the contents of the error message dialog.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Remove redundant OK button from the updates installed
    notification.
  + Display a better human readable title for printer drivers.
  + Show a better UI for offline update failure dialog.
  + Set default actions for the update done notifications.
  + Allow searching for packages via the API without appdata.
- Remove HighContrast %icon_theme_cache_post(un) calls, as Symbolic
  icons have replaced them.</changelog>
<changelog author="zaitor@opensuse.org" date="1433505600">- Update to version 3.16.3:
  + Fix a crash in the screenshot loader.
  + Fix a crash when installing rpms that lack description.
  + Fix a crash under Wayland when installing codecs.
  + Avoid scaled up fonts on non-hidpi displays.
  + Wrap long descriptions in the update dialog.
  + Reduce network timeouts to one minute.
  + Several improvements to the sources dialog.
  + Show better human readable names when searching for font
    scripts.
  + Updated translations.
- Add iso-codes Requires: New runtime dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1434283200">- Update to version 3.16.4:
  + Fix a frequent crash in appstream plugin.
  + Fix a critical warning when opening the app folder dialog.
  + Fix a possible crash when changing the download-updates option
    in gsettings.
  + Hide updates UI on managed systems.
  + Improve the error dialog for failed offline updates.
  + Workaround text coming up as selected in the updates dialog.
- Add pkgconfig(polkit-gobject-1) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.5:
  + Show installation progress when installing apps.
  + Several improvements to featured app banners.
  + Fix a possible crash when launching an installed app.
  + Update the styling of the history dialog to make sure
    unclickable rows don't appear clickable.
  + Make sure apps that aren't installable are properly hidden in
    the category view.
  + Fix an issue that caused "Source: Unknown" to be shown in the
    app details view.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Do not ship gnome-software-local-file.desktop: gnome-software is
  not yet able to handle local RPM files on openSUSE (boo#941862).</changelog>
<changelog author="zaitor@opensuse.org" date="1444392000">- Add missing %{name}-lang Recommends: We want translations!</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.16.6:
  + Do not force the cache refresh and delete otherwise valid
    packages when downloading updates.
  + Fix several potential crashes when navigating and when
    installing.
  + Prefer the gtk version of gimagereader over the qt5 version.
  + Improve failure code path when install or remove fails.</changelog>
<changelog author="dimstar@opensuse.org" date="1446206400">- Add gnome-software-xterm-is-not-removable.patch: XTerm is a
  system dependency and must not be removable (boo#906598,
  boo#906687). As Leap is based on SLE, we did not inherit the
  split of xterm and xterm-bin.</changelog>

</package>
<package pkgid="8c3c5f334d3e6063a385ae839eb48e2310b02e164c0d9a9e45b782b8c4a65edc" name="gnome-software-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.6" rel="4.1"/>

<changelog author="dimstar@opensuse.org" date="1412683200">- Add gnome-software-nouser-proxy.patch: Do not pass proxy settings
  between user session and packagekitd. openSUSE does not grant the
  required polkit privileges, as user settings should not have an
  impact on the package manager in our view. The proxy settings for
  packagekitd are handled by libzypp/libproxy and are loaded from
  yast proxy settings.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + New Features:
  - Load 128x128 icons if they are installed on HiDPI hardware.
  - Try to load HiDPI screenshots on HiDPI hardware.
  + Bugfix:
  - Always load the fallback icon at 64x64 size.
  - Avoid flickering the spinner during find-as-you-type.
  - Avoid restarting spinner animation when repeatedly calling
    start.
  - Clear all existing applications if the store was invalidated.
  - Destroy the sources dialog when it's closed.
  - Disable text shadow for the updates counter label.
  - Don't allow cancelling appstream plugin plugin startup.
  - Don't crash when the moduleset data is not yet installed.
  - Don't ignore duplicate searches.
  - Don't show addons that are in unavailable state.
  - Don't warn for cancelled operations.
  - First run dialog nonresizable and corrected margins.
  - Fix a race with displaying results from shell search
    provider.
  - Make --details work again.
  - Make search cancelling quicker.
  - Plug a leak when adding apps to the list of updates.
  - Plug a memory leak when refining addons.
  - Reload the all the shells when the AppStream metadata
    changes.
  + Updated translations.
- Bump gs_plugin_api to 7, following upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1414670400">- Split libzypp-plugin-appdata out of gnome-software to be able to
  easier maintain updates.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + New Features:
  - Add the origin as a keyword if it's not the majority source.
  - Support the LOCAL AppStream icon type.
  + Bugfix:
  - Do not fail to get popular apps if the AppStream data is
    invalid.
  - Do not show a random white line above the star rating widget.
  - Do not show empty app boxes if no popular results are
    available.
  - Do not try to download local web-app icons.
  - Fix screenshot loading with --details.
  - Use blue stars for the user-ratings rather than yellow/gold.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 3.14.3 (boo#916784):
  + Bugfix:
  - Fix several possible crashes when clicking the back button.
  - Fix a crash in the screenshot loader.
  - Show an error message when we fail to load details about a
    local file.
  - Make sure back button always leads back to overview.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038401">- Update to version 3.15.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038402">- Update to version 3.15.4:
  + Add support for unavailable packages.
  + Use new API from libappstream-glib for tokenizing the search
    string.
  + Bugfixes:
  - Add some more prefer-GTK rules for applications that ship
    both.
  - Delay the updates-changed notification for a few seconds.
  - Do case-insensitive searching of suitable keywords.
  - Fix color of add button on add to app folder dialog.
  - Fix searching for keyworks with special chars.
  - Update Inkscape featured splash.
  - Use an AsIcon internally to simplify a lot of complex code.
  + Updated translations.
- Rebase gnome-software-add-default-yast-appfolder.patch and
  gnome-software-nouser-proxy.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038403">- Update to version 3.15.90:
  + Add a new panel for displaying session service results.
  + Add a new version of the Modify interface.
  + Require AppData for all available packages.
  + Use the new mockups for the 3rd party source install dialogs.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Enable kinetic scrolling in updates dialog.
  + This release fixes the following bug:
  - Always ensure that the back entry focus widget is valid.
  - Don't show small screenshots on HiDPI hardware.
  - Fix a crash when starting GNOME Software for the first time.
  - Only show compatible projects when getting the featured
    list.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + This unstable release adds the following features:
  - React to theme changes.
  - Rebase the HighContrast theme.
  + This release fixes the following bug:
  - Fix HiDPI scale factor calculation.
  - Align section headings in all views.
  - Fix 'installed' overlays when using the HighContrast theme.
  - Fall back to showing the top level category when no sub
    category exists.
  - Fix a crash when using the pending applications feature.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.16.1:
  + Correctly save HiDPI images to HiDPI directories.
  + Scroll the contents of the error message dialog.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Remove redundant OK button from the updates installed
    notification.
  + Display a better human readable title for printer drivers.
  + Show a better UI for offline update failure dialog.
  + Set default actions for the update done notifications.
  + Allow searching for packages via the API without appdata.
- Remove HighContrast %icon_theme_cache_post(un) calls, as Symbolic
  icons have replaced them.</changelog>
<changelog author="zaitor@opensuse.org" date="1433505600">- Update to version 3.16.3:
  + Fix a crash in the screenshot loader.
  + Fix a crash when installing rpms that lack description.
  + Fix a crash under Wayland when installing codecs.
  + Avoid scaled up fonts on non-hidpi displays.
  + Wrap long descriptions in the update dialog.
  + Reduce network timeouts to one minute.
  + Several improvements to the sources dialog.
  + Show better human readable names when searching for font
    scripts.
  + Updated translations.
- Add iso-codes Requires: New runtime dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1434283200">- Update to version 3.16.4:
  + Fix a frequent crash in appstream plugin.
  + Fix a critical warning when opening the app folder dialog.
  + Fix a possible crash when changing the download-updates option
    in gsettings.
  + Hide updates UI on managed systems.
  + Improve the error dialog for failed offline updates.
  + Workaround text coming up as selected in the updates dialog.
- Add pkgconfig(polkit-gobject-1) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.5:
  + Show installation progress when installing apps.
  + Several improvements to featured app banners.
  + Fix a possible crash when launching an installed app.
  + Update the styling of the history dialog to make sure
    unclickable rows don't appear clickable.
  + Make sure apps that aren't installable are properly hidden in
    the category view.
  + Fix an issue that caused "Source: Unknown" to be shown in the
    app details view.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Do not ship gnome-software-local-file.desktop: gnome-software is
  not yet able to handle local RPM files on openSUSE (boo#941862).</changelog>
<changelog author="zaitor@opensuse.org" date="1444392000">- Add missing %{name}-lang Recommends: We want translations!</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.16.6:
  + Do not force the cache refresh and delete otherwise valid
    packages when downloading updates.
  + Fix several potential crashes when navigating and when
    installing.
  + Prefer the gtk version of gimagereader over the qt5 version.
  + Improve failure code path when install or remove fails.</changelog>
<changelog author="dimstar@opensuse.org" date="1446206400">- Add gnome-software-xterm-is-not-removable.patch: XTerm is a
  system dependency and must not be removable (boo#906598,
  boo#906687). As Leap is based on SLE, we did not inherit the
  split of xterm and xterm-bin.</changelog>

</package>
<package pkgid="b611dfa2c72dc6b996b52997ad04dd6abb5b3a49dcb244fcd573a32ca4359d4e" name="gnome-software-debugsource" arch="x86_64">
    <version epoch="0" ver="3.16.6" rel="4.1"/>

<changelog author="dimstar@opensuse.org" date="1412683200">- Add gnome-software-nouser-proxy.patch: Do not pass proxy settings
  between user session and packagekitd. openSUSE does not grant the
  required polkit privileges, as user settings should not have an
  impact on the package manager in our view. The proxy settings for
  packagekitd are handled by libzypp/libproxy and are loaded from
  yast proxy settings.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + New Features:
  - Load 128x128 icons if they are installed on HiDPI hardware.
  - Try to load HiDPI screenshots on HiDPI hardware.
  + Bugfix:
  - Always load the fallback icon at 64x64 size.
  - Avoid flickering the spinner during find-as-you-type.
  - Avoid restarting spinner animation when repeatedly calling
    start.
  - Clear all existing applications if the store was invalidated.
  - Destroy the sources dialog when it's closed.
  - Disable text shadow for the updates counter label.
  - Don't allow cancelling appstream plugin plugin startup.
  - Don't crash when the moduleset data is not yet installed.
  - Don't ignore duplicate searches.
  - Don't show addons that are in unavailable state.
  - Don't warn for cancelled operations.
  - First run dialog nonresizable and corrected margins.
  - Fix a race with displaying results from shell search
    provider.
  - Make --details work again.
  - Make search cancelling quicker.
  - Plug a leak when adding apps to the list of updates.
  - Plug a memory leak when refining addons.
  - Reload the all the shells when the AppStream metadata
    changes.
  + Updated translations.
- Bump gs_plugin_api to 7, following upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1414670400">- Split libzypp-plugin-appdata out of gnome-software to be able to
  easier maintain updates.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + New Features:
  - Add the origin as a keyword if it's not the majority source.
  - Support the LOCAL AppStream icon type.
  + Bugfix:
  - Do not fail to get popular apps if the AppStream data is
    invalid.
  - Do not show a random white line above the star rating widget.
  - Do not show empty app boxes if no popular results are
    available.
  - Do not try to download local web-app icons.
  - Fix screenshot loading with --details.
  - Use blue stars for the user-ratings rather than yellow/gold.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 3.14.3 (boo#916784):
  + Bugfix:
  - Fix several possible crashes when clicking the back button.
  - Fix a crash in the screenshot loader.
  - Show an error message when we fail to load details about a
    local file.
  - Make sure back button always leads back to overview.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038401">- Update to version 3.15.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038402">- Update to version 3.15.4:
  + Add support for unavailable packages.
  + Use new API from libappstream-glib for tokenizing the search
    string.
  + Bugfixes:
  - Add some more prefer-GTK rules for applications that ship
    both.
  - Delay the updates-changed notification for a few seconds.
  - Do case-insensitive searching of suitable keywords.
  - Fix color of add button on add to app folder dialog.
  - Fix searching for keyworks with special chars.
  - Update Inkscape featured splash.
  - Use an AsIcon internally to simplify a lot of complex code.
  + Updated translations.
- Rebase gnome-software-add-default-yast-appfolder.patch and
  gnome-software-nouser-proxy.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038403">- Update to version 3.15.90:
  + Add a new panel for displaying session service results.
  + Add a new version of the Modify interface.
  + Require AppData for all available packages.
  + Use the new mockups for the 3rd party source install dialogs.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Enable kinetic scrolling in updates dialog.
  + This release fixes the following bug:
  - Always ensure that the back entry focus widget is valid.
  - Don't show small screenshots on HiDPI hardware.
  - Fix a crash when starting GNOME Software for the first time.
  - Only show compatible projects when getting the featured
    list.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + This unstable release adds the following features:
  - React to theme changes.
  - Rebase the HighContrast theme.
  + This release fixes the following bug:
  - Fix HiDPI scale factor calculation.
  - Align section headings in all views.
  - Fix 'installed' overlays when using the HighContrast theme.
  - Fall back to showing the top level category when no sub
    category exists.
  - Fix a crash when using the pending applications feature.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.16.1:
  + Correctly save HiDPI images to HiDPI directories.
  + Scroll the contents of the error message dialog.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Remove redundant OK button from the updates installed
    notification.
  + Display a better human readable title for printer drivers.
  + Show a better UI for offline update failure dialog.
  + Set default actions for the update done notifications.
  + Allow searching for packages via the API without appdata.
- Remove HighContrast %icon_theme_cache_post(un) calls, as Symbolic
  icons have replaced them.</changelog>
<changelog author="zaitor@opensuse.org" date="1433505600">- Update to version 3.16.3:
  + Fix a crash in the screenshot loader.
  + Fix a crash when installing rpms that lack description.
  + Fix a crash under Wayland when installing codecs.
  + Avoid scaled up fonts on non-hidpi displays.
  + Wrap long descriptions in the update dialog.
  + Reduce network timeouts to one minute.
  + Several improvements to the sources dialog.
  + Show better human readable names when searching for font
    scripts.
  + Updated translations.
- Add iso-codes Requires: New runtime dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1434283200">- Update to version 3.16.4:
  + Fix a frequent crash in appstream plugin.
  + Fix a critical warning when opening the app folder dialog.
  + Fix a possible crash when changing the download-updates option
    in gsettings.
  + Hide updates UI on managed systems.
  + Improve the error dialog for failed offline updates.
  + Workaround text coming up as selected in the updates dialog.
- Add pkgconfig(polkit-gobject-1) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.5:
  + Show installation progress when installing apps.
  + Several improvements to featured app banners.
  + Fix a possible crash when launching an installed app.
  + Update the styling of the history dialog to make sure
    unclickable rows don't appear clickable.
  + Make sure apps that aren't installable are properly hidden in
    the category view.
  + Fix an issue that caused "Source: Unknown" to be shown in the
    app details view.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Do not ship gnome-software-local-file.desktop: gnome-software is
  not yet able to handle local RPM files on openSUSE (boo#941862).</changelog>
<changelog author="zaitor@opensuse.org" date="1444392000">- Add missing %{name}-lang Recommends: We want translations!</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.16.6:
  + Do not force the cache refresh and delete otherwise valid
    packages when downloading updates.
  + Fix several potential crashes when navigating and when
    installing.
  + Prefer the gtk version of gimagereader over the qt5 version.
  + Improve failure code path when install or remove fails.</changelog>
<changelog author="dimstar@opensuse.org" date="1446206400">- Add gnome-software-xterm-is-not-removable.patch: XTerm is a
  system dependency and must not be removable (boo#906598,
  boo#906687). As Leap is based on SLE, we did not inherit the
  split of xterm and xterm-bin.</changelog>

</package>
<package pkgid="ba75703c1456cc11db40e17ddfe6c3ce98e3ece16f807b9bebe9ed5704a27ce9" name="gnome-software-lang" arch="noarch">
    <version epoch="0" ver="3.16.6" rel="4.1"/>

<changelog author="dimstar@opensuse.org" date="1412683200">- Add gnome-software-nouser-proxy.patch: Do not pass proxy settings
  between user session and packagekitd. openSUSE does not grant the
  required polkit privileges, as user settings should not have an
  impact on the package manager in our view. The proxy settings for
  packagekitd are handled by libzypp/libproxy and are loaded from
  yast proxy settings.</changelog>
<changelog author="zaitor@opensuse.org" date="1413201600">- Update to version 3.14.1:
  + New Features:
  - Load 128x128 icons if they are installed on HiDPI hardware.
  - Try to load HiDPI screenshots on HiDPI hardware.
  + Bugfix:
  - Always load the fallback icon at 64x64 size.
  - Avoid flickering the spinner during find-as-you-type.
  - Avoid restarting spinner animation when repeatedly calling
    start.
  - Clear all existing applications if the store was invalidated.
  - Destroy the sources dialog when it's closed.
  - Disable text shadow for the updates counter label.
  - Don't allow cancelling appstream plugin plugin startup.
  - Don't crash when the moduleset data is not yet installed.
  - Don't ignore duplicate searches.
  - Don't show addons that are in unavailable state.
  - Don't warn for cancelled operations.
  - First run dialog nonresizable and corrected margins.
  - Fix a race with displaying results from shell search
    provider.
  - Make --details work again.
  - Make search cancelling quicker.
  - Plug a leak when adding apps to the list of updates.
  - Plug a memory leak when refining addons.
  - Reload the all the shells when the AppStream metadata
    changes.
  + Updated translations.
- Bump gs_plugin_api to 7, following upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1414670400">- Split libzypp-plugin-appdata out of gnome-software to be able to
  easier maintain updates.</changelog>
<changelog author="zaitor@opensuse.org" date="1415880000">- Update to version 3.14.2:
  + New Features:
  - Add the origin as a keyword if it's not the majority source.
  - Support the LOCAL AppStream icon type.
  + Bugfix:
  - Do not fail to get popular apps if the AppStream data is
    invalid.
  - Do not show a random white line above the star rating widget.
  - Do not show empty app boxes if no popular results are
    available.
  - Do not try to download local web-app icons.
  - Fix screenshot loading with --details.
  - Use blue stars for the user-ratings rather than yellow/gold.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038400">- Update to version 3.14.3 (boo#916784):
  + Bugfix:
  - Fix several possible crashes when clicking the back button.
  - Fix a crash in the screenshot loader.
  - Show an error message when we fail to load details about a
    local file.
  - Make sure back button always leads back to overview.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1425038401">- Update to version 3.15.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038402">- Update to version 3.15.4:
  + Add support for unavailable packages.
  + Use new API from libappstream-glib for tokenizing the search
    string.
  + Bugfixes:
  - Add some more prefer-GTK rules for applications that ship
    both.
  - Delay the updates-changed notification for a few seconds.
  - Do case-insensitive searching of suitable keywords.
  - Fix color of add button on add to app folder dialog.
  - Fix searching for keyworks with special chars.
  - Update Inkscape featured splash.
  - Use an AsIcon internally to simplify a lot of complex code.
  + Updated translations.
- Rebase gnome-software-add-default-yast-appfolder.patch and
  gnome-software-nouser-proxy.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1425038403">- Update to version 3.15.90:
  + Add a new panel for displaying session service results.
  + Add a new version of the Modify interface.
  + Require AppData for all available packages.
  + Use the new mockups for the 3rd party source install dialogs.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.91:
  + Enable kinetic scrolling in updates dialog.
  + This release fixes the following bug:
  - Always ensure that the back entry focus widget is valid.
  - Don't show small screenshots on HiDPI hardware.
  - Fix a crash when starting GNOME Software for the first time.
  - Only show compatible projects when getting the featured
    list.</changelog>
<changelog author="dimstar@opensuse.org" date="1426507200">- Update to version 3.15.92:
  + This unstable release adds the following features:
  - React to theme changes.
  - Rebase the HighContrast theme.
  + This release fixes the following bug:
  - Fix HiDPI scale factor calculation.
  - Align section headings in all views.
  - Fix 'installed' overlays when using the HighContrast theme.
  - Fall back to showing the top level category when no sub
    category exists.
  - Fix a crash when using the pending applications feature.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.16.1:
  + Correctly save HiDPI images to HiDPI directories.
  + Scroll the contents of the error message dialog.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.2:
  + Remove redundant OK button from the updates installed
    notification.
  + Display a better human readable title for printer drivers.
  + Show a better UI for offline update failure dialog.
  + Set default actions for the update done notifications.
  + Allow searching for packages via the API without appdata.
- Remove HighContrast %icon_theme_cache_post(un) calls, as Symbolic
  icons have replaced them.</changelog>
<changelog author="zaitor@opensuse.org" date="1433505600">- Update to version 3.16.3:
  + Fix a crash in the screenshot loader.
  + Fix a crash when installing rpms that lack description.
  + Fix a crash under Wayland when installing codecs.
  + Avoid scaled up fonts on non-hidpi displays.
  + Wrap long descriptions in the update dialog.
  + Reduce network timeouts to one minute.
  + Several improvements to the sources dialog.
  + Show better human readable names when searching for font
    scripts.
  + Updated translations.
- Add iso-codes Requires: New runtime dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1434283200">- Update to version 3.16.4:
  + Fix a frequent crash in appstream plugin.
  + Fix a critical warning when opening the app folder dialog.
  + Fix a possible crash when changing the download-updates option
    in gsettings.
  + Hide updates UI on managed systems.
  + Improve the error dialog for failed offline updates.
  + Workaround text coming up as selected in the updates dialog.
- Add pkgconfig(polkit-gobject-1) BuildRequires: New dependency.</changelog>
<changelog author="zaitor@opensuse.org" date="1438603200">- Update to version 3.16.5:
  + Show installation progress when installing apps.
  + Several improvements to featured app banners.
  + Fix a possible crash when launching an installed app.
  + Update the styling of the history dialog to make sure
    unclickable rows don't appear clickable.
  + Make sure apps that aren't installable are properly hidden in
    the category view.
  + Fix an issue that caused "Source: Unknown" to be shown in the
    app details view.</changelog>
<changelog author="dimstar@opensuse.org" date="1441195200">- Do not ship gnome-software-local-file.desktop: gnome-software is
  not yet able to handle local RPM files on openSUSE (boo#941862).</changelog>
<changelog author="zaitor@opensuse.org" date="1444392000">- Add missing %{name}-lang Recommends: We want translations!</changelog>
<changelog author="zaitor@opensuse.org" date="1445083200">- Update to version 3.16.6:
  + Do not force the cache refresh and delete otherwise valid
    packages when downloading updates.
  + Fix several potential crashes when navigating and when
    installing.
  + Prefer the gtk version of gimagereader over the qt5 version.
  + Improve failure code path when install or remove fails.</changelog>
<changelog author="dimstar@opensuse.org" date="1446206400">- Add gnome-software-xterm-is-not-removable.patch: XTerm is a
  system dependency and must not be removable (boo#906598,
  boo#906687). As Leap is based on SLE, we did not inherit the
  split of xterm and xterm-bin.</changelog>

</package>
<package pkgid="6cbae607be34be7b7f1905d11a44d980ca008068ed6aa42dd66f366e31990473" name="gtk3" arch="src">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="1c5576f1c440970a58821f21a4173fbb0f522c020de670893191a2554341e0cb" name="gtk3-branding-upstream" arch="noarch">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="2f3af9febd341c3efd38a9d48cdcdb771d97400ba9e9cc9b1471ee06c189145c" name="gtk3-data" arch="noarch">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="327c217febde58c0b2c2f04c59795aeda4c0cfafd46846ea691cff182cc8ac0c" name="gtk3-debugsource" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="050e0ee0cda3fa7991d0c60bc322697c019dc1b8d3a29d63bdc1229e35706311" name="gtk3-devel" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="6a5b1b7a317b14b5e116be6be99f12a50698cae69bb5290667930061fc93936b" name="gtk3-devel-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="8fa0c51e9faf5109e003fbfbc73cb8bb77b676c8ce1e0658aaa23eec1a7dcb80" name="gtk3-devel-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="20b6a85fc887dd6773738ccdef18a12399a0a20559f63bcdd18aa3f2b79548c9" name="gtk3-devel-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="5b67bddc34adeae1e054ab840cc422d2750494ef2154e42694645998d563e764" name="gtk3-immodule-amharic" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="76aeef01159a3fe333f0026b3067cf8451f0331547d50284946e4d8a645e7088" name="gtk3-immodule-amharic-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="2c59b1a3b7d17596f8374bc864e3b2efe30d9c886cd87a84ca1b18961be3f40c" name="gtk3-immodule-amharic-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="31a23edd2569304c17ad9ef7625806eea86c6c5cb3e61f0afab448a45771c995" name="gtk3-immodule-amharic-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="7326529dba587dc0c6a62e03645dc1d57b6460b4c549c8eebec266fe4b3f33d6" name="gtk3-immodule-broadway" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="97c6896a74c8e39b488fd70ff6a002b0909425b046cc3636fcefc7f9dcb44512" name="gtk3-immodule-broadway-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="484122433bb1d8b5bca44dcea86c06d7ae78f354726b2b69bfcbd71568fd7538" name="gtk3-immodule-inuktitut" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="e489bd2aacaf64420689a4e3d97c4dc0455431dfbd66073088c53508f0b5d671" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="ccc0a3518e3a24fe2d38b2f9be782d0ab67b871ab146b5f876b99feb38ccdaba" name="gtk3-immodule-inuktitut-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="269c536ceda7e82f863ce17991522f9ae2252fd725143d57363e357acda8d403" name="gtk3-immodule-inuktitut-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="7892e5a98497893bc6edf0d138ecc7f57cd4c9c0e364e8e03d0bf7b084e8dcdc" name="gtk3-immodule-multipress" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="00a7346713f2838ab30a338a204124cddb7d2c91d571517c808f99d1962b7820" name="gtk3-immodule-multipress-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="e213e86d2dc72901e2ce3d7ed7ecf5951c2ca8c8e92092e99ae02ceab86e451e" name="gtk3-immodule-multipress-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="6205d16bc02dd91a17c7d797d8d47bcc8fef11158c3849f3cbfb329446a9ce6a" name="gtk3-immodule-multipress-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="83ba3e95504a9f9718763b07de5e252ef579782708268942b211b8ca5e0db409" name="gtk3-immodule-thai" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="21f6ec6e8717af4f681fac802464f8e31e33decd47ac2fb53ecfcd09f1eb07cb" name="gtk3-immodule-thai-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="70e207c49bb9ba8c27d9e021d057efbb2b650c80e45bd58151c25242118533f0" name="gtk3-immodule-thai-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="5b6bde5b943e19d4c763d04b149a498ed24cf4b92983c87446df680b60d79064" name="gtk3-immodule-thai-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="d6d2bd6617c49e63347044fa1f10870152fceca62b9500db2388c6c4a5855a84" name="gtk3-immodule-vietnamese" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="51291800f4f59f5ccae03708bf9b0421c7df14242d62d37f6624caed875e1f4d" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="a2d7f557478d924bb8df28d4b52cd99925ba43a2cc7dd0a889bdc9fe770a469b" name="gtk3-immodule-vietnamese-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="df2bae1dca622473d965d45bcc0678cdf4fa489ef18d9150ef2b367cb065b816" name="gtk3-immodule-vietnamese-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="82be07b1077d257c80c7b5477a7d216816b82f47f3701a5793487b47d7830692" name="gtk3-immodule-xim" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="f3c42325a6c10d1661a3004fd99e02f1b7966a884dfe14d1d4acd3b52506868d" name="gtk3-immodule-xim-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="4e28b44c4887a3383435583f39a39b247c93ce94e3aa63494af140d110697f58" name="gtk3-immodule-xim-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="de89159aff7064e31e27119eb06839293c34b052c299f9fbf77080ab19939777" name="gtk3-immodule-xim-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="4f518e5c2c3b23b8407404a9a36ca14adbc47fec4674b49be7a68811d80b3a21" name="gtk3-immodules-tigrigna" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="aa72cfae400fbcd7205cdfd1005523d18d530934e669b0e0148cdd0abb0621ed" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="774e22e9a5dc862729b5bfb37369c415c132767b8012981ec35dde263685529b" name="gtk3-immodules-tigrigna-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="d834511e5443f542268c26955871fd673d8427a3e25823f772c5cef72385e78d" name="gtk3-immodules-tigrigna-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="3388b014b18019061fcfa0ed83f472a54266a81b1a89a23de7482db451d2168c" name="gtk3-lang" arch="noarch">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="04d2788906d4598ab2e3863a7dbe88c97a354b268b1d00031658979836d2e05d" name="gtk3-tools" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="ff92058fd7885741f68cb1f981b92e82609f23df60de66f2f6fd06d70454f7eb" name="gtk3-tools-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="8274591b082611123d412069cf30addf5a647dcc68a708e32297b97e73b7b58c" name="gtk3-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="090d11372c483b357762851c8255a48510a03857cac43045f98b103b52338673" name="gtk3-tools-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="76083a0a98743e809f31ffbe138d9d7d644e608a9dc9b52a6c28b58f55c11f9d" name="ibus-libpinyin" arch="src">
    <version epoch="0" ver="1.7.2git20150720" rel="4.1"/>

<changelog author="hillwood@linuxfans.org" date="1340366400">- Initial package from ibus-libpinyin git, version 1.4.0.20120612</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144000">- enable opencc support</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144001">- add a .desktop file</changelog>
<changelog author="hillwood@linuxfans.org" date="1341489600">- add a requires package, opencc is needed by ibus-libpinyin</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440000">- update to 1.4.1
  * fixes fillLookupTableByPage</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440001">- update to 1.4.91，the first release of 1.5.x series.
- Add new options to setup dialog</changelog>
<changelog author="hillwood@linuxfans.org" date="1359288000">- update to 1.4.93.
  * detect libpinyin datadir
  * fixes bopomofo icon
  * fixes ';' in double pinyin
  * add symbol to libpinyin.xml.in.in
  * add libpinyin depends
  * fixes automake</changelog>
<changelog author="hillwood@linuxfans.org" date="1367150400">- update to 1.5.92
  * fixes setup dialog
  * change config key name
  * add using namespace pinyin
  * remove special phrases
  * re-factor ExtEditor
  * update base.lua
  * fixes download url in bus-libpinyin.spec.in
  * fixes getLookupCursor
  * update main2.py
  * update po files
  * polish UI
  * and more ..</changelog>
<changelog author="hillwood@linuxfans.org" date="1373284800">- update to 1.6.91
  * update libpinyin requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1373630400">- enable lua support
- bring it as default in DVD, add Provides tag</changelog>
<changelog author="hillwood@linuxfans.org" date="1383134400">- add python-xdg as Requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1393588800">- update to 1.6.92
  * minor bug fixes</changelog>
<changelog author="hillwood@linuxfans.org" date="1424001600">- Update to 1.6.99.20150203
  * update class LibPinyinConfig to support export user phrases
  * update setup dialog UI
  * write exportPinyinDictionary method
  * use opencc 1.0</changelog>
<changelog author="hillwood@linuxfans.org" date="1424433600">- Fix Requires error.</changelog>
<changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
<changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>

</package>
<package pkgid="e104d7efd4997f09404667bc278b9d4f2c4d646823c91d50d2974eb83ae6cc8b" name="ibus-libpinyin" arch="x86_64">
    <version epoch="0" ver="1.7.2git20150720" rel="4.1"/>

<changelog author="hillwood@linuxfans.org" date="1340366400">- Initial package from ibus-libpinyin git, version 1.4.0.20120612</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144000">- enable opencc support</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144001">- add a .desktop file</changelog>
<changelog author="hillwood@linuxfans.org" date="1341489600">- add a requires package, opencc is needed by ibus-libpinyin</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440000">- update to 1.4.1
  * fixes fillLookupTableByPage</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440001">- update to 1.4.91，the first release of 1.5.x series.
- Add new options to setup dialog</changelog>
<changelog author="hillwood@linuxfans.org" date="1359288000">- update to 1.4.93.
  * detect libpinyin datadir
  * fixes bopomofo icon
  * fixes ';' in double pinyin
  * add symbol to libpinyin.xml.in.in
  * add libpinyin depends
  * fixes automake</changelog>
<changelog author="hillwood@linuxfans.org" date="1367150400">- update to 1.5.92
  * fixes setup dialog
  * change config key name
  * add using namespace pinyin
  * remove special phrases
  * re-factor ExtEditor
  * update base.lua
  * fixes download url in bus-libpinyin.spec.in
  * fixes getLookupCursor
  * update main2.py
  * update po files
  * polish UI
  * and more ..</changelog>
<changelog author="hillwood@linuxfans.org" date="1373284800">- update to 1.6.91
  * update libpinyin requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1373630400">- enable lua support
- bring it as default in DVD, add Provides tag</changelog>
<changelog author="hillwood@linuxfans.org" date="1383134400">- add python-xdg as Requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1393588800">- update to 1.6.92
  * minor bug fixes</changelog>
<changelog author="hillwood@linuxfans.org" date="1424001600">- Update to 1.6.99.20150203
  * update class LibPinyinConfig to support export user phrases
  * update setup dialog UI
  * write exportPinyinDictionary method
  * use opencc 1.0</changelog>
<changelog author="hillwood@linuxfans.org" date="1424433600">- Fix Requires error.</changelog>
<changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
<changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>

</package>
<package pkgid="6530f50c922c13786c93002be784a0f0c3832a193a03f2e816caa84334542fd9" name="ibus-libpinyin-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.2git20150720" rel="4.1"/>

<changelog author="hillwood@linuxfans.org" date="1340366400">- Initial package from ibus-libpinyin git, version 1.4.0.20120612</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144000">- enable opencc support</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144001">- add a .desktop file</changelog>
<changelog author="hillwood@linuxfans.org" date="1341489600">- add a requires package, opencc is needed by ibus-libpinyin</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440000">- update to 1.4.1
  * fixes fillLookupTableByPage</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440001">- update to 1.4.91，the first release of 1.5.x series.
- Add new options to setup dialog</changelog>
<changelog author="hillwood@linuxfans.org" date="1359288000">- update to 1.4.93.
  * detect libpinyin datadir
  * fixes bopomofo icon
  * fixes ';' in double pinyin
  * add symbol to libpinyin.xml.in.in
  * add libpinyin depends
  * fixes automake</changelog>
<changelog author="hillwood@linuxfans.org" date="1367150400">- update to 1.5.92
  * fixes setup dialog
  * change config key name
  * add using namespace pinyin
  * remove special phrases
  * re-factor ExtEditor
  * update base.lua
  * fixes download url in bus-libpinyin.spec.in
  * fixes getLookupCursor
  * update main2.py
  * update po files
  * polish UI
  * and more ..</changelog>
<changelog author="hillwood@linuxfans.org" date="1373284800">- update to 1.6.91
  * update libpinyin requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1373630400">- enable lua support
- bring it as default in DVD, add Provides tag</changelog>
<changelog author="hillwood@linuxfans.org" date="1383134400">- add python-xdg as Requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1393588800">- update to 1.6.92
  * minor bug fixes</changelog>
<changelog author="hillwood@linuxfans.org" date="1424001600">- Update to 1.6.99.20150203
  * update class LibPinyinConfig to support export user phrases
  * update setup dialog UI
  * write exportPinyinDictionary method
  * use opencc 1.0</changelog>
<changelog author="hillwood@linuxfans.org" date="1424433600">- Fix Requires error.</changelog>
<changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
<changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>

</package>
<package pkgid="9508fd64c81ba14897fa8c8f9014137292bc4ff5c35f5bf16aced57489e181ab" name="ibus-libpinyin-debugsource" arch="x86_64">
    <version epoch="0" ver="1.7.2git20150720" rel="4.1"/>

<changelog author="hillwood@linuxfans.org" date="1340366400">- Initial package from ibus-libpinyin git, version 1.4.0.20120612</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144000">- enable opencc support</changelog>
<changelog author="hillwood@linuxfans.org" date="1341144001">- add a .desktop file</changelog>
<changelog author="hillwood@linuxfans.org" date="1341489600">- add a requires package, opencc is needed by ibus-libpinyin</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440000">- update to 1.4.1
  * fixes fillLookupTableByPage</changelog>
<changelog author="hillwood@linuxfans.org" date="1342440001">- update to 1.4.91，the first release of 1.5.x series.
- Add new options to setup dialog</changelog>
<changelog author="hillwood@linuxfans.org" date="1359288000">- update to 1.4.93.
  * detect libpinyin datadir
  * fixes bopomofo icon
  * fixes ';' in double pinyin
  * add symbol to libpinyin.xml.in.in
  * add libpinyin depends
  * fixes automake</changelog>
<changelog author="hillwood@linuxfans.org" date="1367150400">- update to 1.5.92
  * fixes setup dialog
  * change config key name
  * add using namespace pinyin
  * remove special phrases
  * re-factor ExtEditor
  * update base.lua
  * fixes download url in bus-libpinyin.spec.in
  * fixes getLookupCursor
  * update main2.py
  * update po files
  * polish UI
  * and more ..</changelog>
<changelog author="hillwood@linuxfans.org" date="1373284800">- update to 1.6.91
  * update libpinyin requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1373630400">- enable lua support
- bring it as default in DVD, add Provides tag</changelog>
<changelog author="hillwood@linuxfans.org" date="1383134400">- add python-xdg as Requires</changelog>
<changelog author="hillwood@linuxfans.org" date="1393588800">- update to 1.6.92
  * minor bug fixes</changelog>
<changelog author="hillwood@linuxfans.org" date="1424001600">- Update to 1.6.99.20150203
  * update class LibPinyinConfig to support export user phrases
  * update setup dialog UI
  * write exportPinyinDictionary method
  * use opencc 1.0</changelog>
<changelog author="hillwood@linuxfans.org" date="1424433600">- Fix Requires error.</changelog>
<changelog author="hillwood@linuxfans.org" date="1428494400">- Update to 1.7.1
  * select the first item in shortcut editor
  * fixes shortcut keys in setup dialog
  * fixes default values</changelog>
<changelog author="hillwood@opensuse.org" date="1443614400">- Update tp 1.7.2
  * Fix for Lua 5.2 API change (luaL_register is deprecated)
  * update po files
  * update clearPinyinUserData method
  * update m_dictionaries
  * use pinyin_load_addon_phrase_library function
  * update setup dialog
  * fixes a typo
  * add libpinyin.appdata.xml
- Fix boo#947676</changelog>

</package>
<package pkgid="8b66dc734c6e8bfc6e537864a5838145cd3eebd6ca899bfcd0d7e96080dc19a3" name="java-1_7_0-openjdk" arch="src">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="f122ef073bae3d2c874d1d26a5f6820cce6fbb2d529b1d00afffbbc2a97bcb22" name="java-1_7_0-openjdk" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="6b8824fea5b9dfdd688260978c2372c1fe900c8a6ca932546dc01b68d8d868ea" name="java-1_7_0-openjdk-accessibility" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="011b1ec5f9aacf809fcf13478295cb60fb4abb0eeee519a65950c9d31f331ca5" name="java-1_7_0-openjdk-bootstrap" arch="src">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="6c203a1ee1552efa5d4c40cfaf74cc825df841740e64291acf005cd2bcc5ced4" name="java-1_7_0-openjdk-bootstrap" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="25bb82780c14d26158c01acf46a1557c92b30b8c155a9337b02f8c36df7d55ab" name="java-1_7_0-openjdk-bootstrap-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="d1a53b3d26bd352b4063699f6c7c9652064fb0a33b0a5d1773586aa9b4afa49d" name="java-1_7_0-openjdk-bootstrap-debugsource" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="ed3e338150c84f9edd7dbfa2e025668fbf9bc1f7e79436653ffa13e2c6198fbb" name="java-1_7_0-openjdk-bootstrap-devel" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="d50284f3e578b64c1c9eeb005e776753e8901f355c8a67866244a23e71afcec2" name="java-1_7_0-openjdk-bootstrap-devel-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="3d6caa435b94ca498bdd15ca1480f9141c867ad3d2481924b2d92a76f0752f6e" name="java-1_7_0-openjdk-bootstrap-headless" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="a907a1ce6428697772814bfa05341e2425a2ae3bbd3d3c33b0a580f9b8218938" name="java-1_7_0-openjdk-bootstrap-headless-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="d1fe4a5d7c06fd991ea1562147de56bcfa7aca5af1227471531eac02edeae4ef" name="java-1_7_0-openjdk-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="38b25f55aa13fc43dd5b142e0fc1f98cbef1b9511da678b18052baac373db6e8" name="java-1_7_0-openjdk-debugsource" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="34a6c65b53f0bd067aa029081236f307451b9230c7e9b44de32ed167bf08d604" name="java-1_7_0-openjdk-demo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="2455de87393f892eaeabae7ed5ceb3f1367ea3f15bf932f6a26aea6e5c1c0994" name="java-1_7_0-openjdk-demo-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="5b8b1a8fd3e97834b68e8a554323c3cdef97a8a75fc7169af914d5782847e871" name="java-1_7_0-openjdk-devel" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="8a6615c482da0d6193c59c8957cee4d650adf55d56de1627a01c3ce33ab5a8ea" name="java-1_7_0-openjdk-devel-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="c59bd4c49381478ff586ab2d29a0469513036d699eae4c08334523afdb7dcaa8" name="java-1_7_0-openjdk-headless" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="ee61dbfc159d1fd751bec96fa159748474fab24ba9971ed45d40e485128c6c50" name="java-1_7_0-openjdk-headless-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="5adce4e07b31327014c701cbbae1dbdc094f6b1eecf875e06fee8c4a0c063b53" name="java-1_7_0-openjdk-javadoc" arch="noarch">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="db9f540486c0b0caa4b4535f3ee46b939e28fec45c479ba3512de19cd70cf8b8" name="java-1_7_0-openjdk-src" arch="x86_64">
    <version epoch="0" ver="1.7.0.91" rel="22.1"/>

<changelog author="fstrba@suse.com" date="1416916800">- Do not require tzdata-java for the bootstrap package
  * This package is used to provide bootstrap tools for a
    controlled set of packages and does not do anything time zone
    related.</changelog>
<changelog author="fstrba@suse.com" date="1421323200">- Add 7085757-currency_fix.patch: Icedtea7 patch to allow build
  after 31.12.2014.
- Add dependency on autoconf and automake, since we are patching
  build system.</changelog>
<changelog author="fstrba@suse.com" date="1421928000">- Update to 2.5.4 - OpenJDK 7u75
  * Security fixes
  - S8046656: Update protocol support
  - S8047125, CVE-2015-0395: (ref) More phantom object references
  - S8047130: Fewer escapes from escape analysis
  - S8048035, CVE-2015-0400: Ensure proper proxy protocols
  - S8049253: Better GC validation
  - S8050807, CVE-2015-0383: Better performing performance data
    handling
  - S8054367, CVE-2015-0412: More references for endpoints
  - S8055304, CVE-2015-0407: More boxing for
    DirectoryComboBoxModel
  - S8055309, CVE-2015-0408: RMI needs better transportation
    considerations
  - S8055479: TLAB stability
  - S8055489, CVE-2014-6585: Better substitution formats
  - S8056264, CVE-2014-6587: Multicast support improvements
  - S8056276, CVE-2014-6591: Fontmanager feature improvements
  - S8057555, CVE-2014-6593: Less cryptic cipher suite management
  - S8058982, CVE-2014-6601: Better verification of an
    exceptional invokespecial
  - S8059485, CVE-2015-0410: Resolve parsing ambiguity
  - S8061210, CVE-2014-3566: Issues in TLS
  * Backports
  - S6461635: [TESTBUG] BasicTests.sh test fails intermittently
  - S6545422: [TESTBUG] NativeErrors.java uses wrong path name in
    exec
  - S6653795: C2 intrinsic for Unsafe.getAddress performs pointer
    sign extension on 32-bit systems
  - S7028073: The currency symbol for Peru is wrong
  - S7047033: (smartcardio) Card.disconnect(boolean reset) does
    not reset when reset is true
  - S7183753: [TEST] Some colon in the diff for this test
  - S7077119, PR2165, G534118: remove past transition dates from
    CurrencyData.properties file
  - S7085757: Currency Data: ISO 4217 Amendment 152
  - S7169142: CookieHandler does not work with localhost
  - S7172012, PR2067: Make test-in-build an option (Queens)
  - S7185456: (ann) Optimize Annotation handling in
    java/sun.reflect.* code for small number of annotations
  - S7195759: ISO 4217 Amendment 154
  - S8000897, RH1155012: VM crash in CompileBroker
  - S8001105: findVirtual of Object[].clone produces internal
    error
  - S8005232: (JEP-149) Class Instance size reduction
  - S8006748: getISO3Country() returns wrong value
  - S8012026: [macosx] Component.getMousePosition() does not
    work in an applet on MacOS
  - S8015421: NegativeArraySizeException occurs in
    ChunkedOutputStream() with Integer.MAX_VALUE
  - S8020190, PR2160, RH1176718: Fatal: Bug in native code:
    jfieldID must match object
  - S8021121: ISO 4217 Amendment Number 156
  - S8021372: NetworkInterface.getNetworkInterfaces() returns
    duplicate hardware address
  - S8022721: TEST_BUG: AnnotationTypeDeadlockTest.java throws
    java.lang.IllegalStateException: unexpected condition
  - S8025051: Update resource files for TimeZone display names
  - S8026792: HOTSPOT: licensee reports a JDK8 build failure
    after 8005849/8005008 fixes integrated
  - S8027359: XML parser returns incorrect parsing results
  - S8028623, PR2112, RH1168693: SA: hash codes in SymbolTable
    mismatching java_lang_String::hash_code for extended characters
  - S8028627: Unsynchronized code path from javax.crypto.Cipher to
    the WeakHashMap used by JceSecurity to store codebase mappings
  - S8028726: (prefs) Check
    src/solaris/native/java/util/FileSystemPreferences.c for JNI
    pending exceptions
  - S8029153: [TESTBUG] test/compiler/7141637/SpreadNullArg.java
    fails because it expects NullPointerException
  - S8031046: Native Windows ccache might still get unsupported
    ticket
  - S8031502: JSR292: IncompatibleClassChangeError in LambdaForm
    for CharSequence.toString() method handle type converter
  - S8032078: [macosx] CPlatformWindow.setWindowState throws
    RuntimeException, if windowState=ICONIFIED|MAXIMIZED_BOTH
  - S8032669: Mouse release not being delivered to Swing component
    in 7u45
  - S8032788: ImageIcon constructor throws an NPE and hangs when
    passed a null String parameter
  - S8032909: XSLT string-length returns incorrect length when
    string includes complementary chars
  - S8034200: Test java/net/CookieHandler/LocalHostCookie.java
    fails after fix of JDK-7169142
  - S8036863: Update jdk7 testlibrary to match jdk8 in hotspot
  - S8040168: Set hotspot version to hs24.66 and build to b01 for
    7u66
  - S8040617: [macosx] Large JTable cell results in a
    OutOfMemoryException
  - S8041132: Increment hsx 24.66 build to b02 for 7u66-b09
  - S8041408: Increment hsx 24.55 build to b04 for 7u55-b34
  - S8041572: [macosx] huge native memory leak in AWTWindow.m
  - S8041990: [macosx] Language specific keys does not work in
    applets when opened outside the browser
  - S8043610: Sorting columns in JFileChooser fails with
    AppContext NPE
  - S8044603: Increment minor version of HSx for 7u71 and
    initialize the build number
  - S8046343: (smartcardio) CardTerminal.connect('direct') does
    not work on MacOSX
  - S8049250: Need a flag to invert the Card.disconnect(reset)
    argument
  - S8049343: (tz) Support tzdata2014g
  - S8049758: Increment minor version of HSx for 7u75 and
    initialize the build number
  - S8050485: super() in a try block in a ctor causes VerifyError
  - S8051359: JPopupMenu creation in headless mode with JDK9b23
    causes NPE
  - S8051614: smartcardio TCK tests fail due to lack of 'reset'
    permission
  - S8055222: Currency update needed for ISO 4217 Amendment #159
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8057184: JCK8's api/javax_swing/JDesktopPane/descriptions.html#getset
    failed with GTKLookAndFeel on Linux and Solaris
  - S8058715: stability issues when being launched as an embedded
    JVM via JNI
  - S8059206: (tz) Support tzdata2014i
  - S8060474: Resolve more parsing ambiguity
  - S8061685: Increment hsx 24.75 build to b02 for 7u75-b06
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java
    has utf8 character corrupted by earlier merge
  - S8061826: Part of JDK-8060474 should be reverted
  - S8062561: Test bug8055304 fails if file system default
    directory has read access
  - S8062807: Exporting RMI objects fails when run under
    restrictive SecurityManager
  - S8064300: Increment hsx 24.75 build to b03 for 7u75-b06
  - S8064560: (tz) Support tzdata2014j
  - S8065608: 7u75 l10n resource file translation update
  - S8065787: Increment hsx 24.75 build to b04 for 7u75-b10
  - S8066747: Backing out Japanese translation change in
    awt_ja.properties
  - S8067364, PR2145, RH114622: Printing to Postscript doesn't
    support dieresis
  * Bug fixes
  - PR2064: Unset OS before running OpenJDK build
  - PR2069: Type-punning warnings still evident on RHEL 5
  - PR2094, RH1163501: 2048-bit DH upper bound too small for
    Fedora infrastructure
  - PR2123: SunEC provider crashes when built using system NSS
  - PR2124: Synchronise elliptic curves in
    sun.security.ec.NamedCurve with those listed by NSS
  - PR2135: Race condition in SunEC provider with system NSS
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  * CACAO
  - PR2032: CACAO lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  * JamVM
  - PR2050: JamVM lacks JVM_FindClassFromCaller introduced by
    security patch in 2.5.3
  - PR2171: JamVM builds with executable stack, causing failures
    on SELinux &amp; PaX kernels
  * AArch64 port
  - Use the IcedTea7 fork version rather than the one based on
    HotSpot 25
  - Add arch-specific processing of tmp1 register needed for d/f2i
  - Add char_array_equals intrinsic
  - Add CNEG and CNEGW to macro assembler
  - Add frame anchor fences
  - Add missing instruction synchronization barriers and cache
    flushes
  - Add some memory barriers for object creation and runtime
    calls
  - Add support for A53 multiply accumulate
  - Add support for AES Intrinsics
  - Add support for pipeline scheduling
  - Add support for String.indexOf intrinsic
  - Added make rules to allow aarch64-x86 hybrid build to progress
  - Added missing aarch64-specific include
  - Added missing aarch64-specific make file
  - Added missing changes for debug code
  - Added missing inline method
  - Added missing shared global UseCRC32Intrinsics
  - Added pd global UseVectoredExceptions
  - Add local method to redirect to AbstractAssembler::relocate
  - Add missing declarations for CRC32 methods
  - Add missing include
  - Add missing special case code for aarch64
  - Add rules to assemble .S files
  - Add support for storing aarch64 call format
  - Add wrapper method to avoid dependency on not yet defined
    code buffer class
  - Added missing endif
  - Allow for 0x400 aligned offsets for byte_map_base
  - Array load must only read 32 bits
  - A more efficient sequence for C1_MacroAssembler::float_cmp
  - Backout 8c8b5e62e624 and instead move .S rule from
    zeroshark.make to rules.make
  - Backout additional changes made in ec6a6772fed6, which revert
    parts of the PPC/AIX port and IcedTea fixes
  - Call ICache::invalidate_range() from
    Relocation::pd_set_data_value()
  - Changed klass oop encode to heap oop encode
  - Changed Method* to methodOop
  - Correct assert to allow for AArch64
  - Correct for difference in include hierarchy
  - Correct typos
  - Corrected error in disassembler code
  - Corrected include
  - Corrected include path
  - Corrected pipeline class for countTrailingZerosL
  - Corrected type
  - Corrected typo
  - Correct includes
  - Correct Method to methdoOopDesc
  - Define uabs().  Use it everywhere an absolute value is wanted
  - Defn of BIND does not need to use __ macro
  - Delete dead code
  - Disassembler library should be built as hsdis-aarch64.so
  - Don't test arraycopy routines when using AArch64 simulator
  - Emit_int64 is renamed
  - Ensure byte_map_base can be loaded using adrp with no need
    for following ldr
  - Ensure C1 static call stub employs absolute move to allow
    patching
  - Ensure C2 static calls use correct call adddress in static
    stub reloc
  - Ensure perm gen size is not rounded down to zero
  - Ensure rmethod is reloaded from stack when interpreter makes
    non leaf VM call
  - Ensure we pick up hsdis-aarch64.so if BUILTIN_SIM is true
  - Fix couple of mistakes in generate of method handle dispatch
  - Fix cut and paste-o in header
  - Fixed another typo
  - Fixed error in include
  - Fixed hsdis for aarch64 native or simulated
  - Fixed various typos and omissions
  - Fixed various typos, overlooked cases and wrong accessors
  - Fix error introduced into profiling code
  - Fix guarantee failure in synchronizer.cpp
  - Fix more errors introduced into interpreter profile counter
    increment
  - Fix relocations
  - Fix several small typos
  - Fix some typos
  - Fix thinko in Atomic::xchg_ptr
  - Fix typo
  - Fix up aarch64-specific patching code
  - Fix up crc32 support
  - Fix various typos
  - Get rid of unnecessary declaration
  - Guess at how to implement C1 deoptimize_trap generator
  - Initial cut of aarch64 code pulled from jdk8 tree
  - Make aarch64-x86 hybrid build use correct paths
  - Make hsdis handle aarch64 native case
  - Make static stubs load methodOop in cpool to avoid problems
    at GC
  - Miscellaneous bug fixes
  - Missing change needed to support aarch64 build
  - Modified make files to support aarch64 build
  - Modified shared src to support full aarch64 backport
  - Moved fields which need access from java to top level
  - Need to actually return the adapter code size
  - Need to pass CFLAGS when assembling .S files using
    CC_COMPILE
  - Need to use class handle not class
  - Provide missing CRC32 methods
  - Reload rcpool register after a VM call in case a permgen GC
    has moved the cache
  - Relocated aarch64 vtable generate code to conform to jdk7
  - Remove comment to avoid breaking macro
  - Removed aarch64 compiled_IC implementation to conform to jdk7
  - Removed metaspaceShared code to conform to jdk7
  - Removed redundant field use_XOR_for_compressed_class_base
  - Removed some errors in signal handling code
  - Removed undefined metadata case
  - Remove redundant bracket
  - Remove support for volatile load/store rules in ad file
  - Renamed emit_int32 to emit_long and added local emit_long64
    in place of missing emit_int64
  - Restored missing open brace
  - Restored several load_heap_oop calls lost in translation
  - Restore working x86 build
  - Reverted aarch64 architecture description (ad) file to
    conform to jdk7
  - Reverted aarch64 c1_xxx files to conform to jdk7
  - Reverted aarch64 c2 globals to conform to jdk7
  - Reverted aarch64 frame code to conform to jdk7
  - Reverted aarch64 runtime code to conform to jdk7
  - Reverted aarch64 stubs code to conform to jdk7
  - Reverted aarch64 template interpreter code to conform to jdk7
  - Reverted aarch64 vm structs code to conform to jdk7
  - Reverted aarch64 vm version code to conform to jdk7
  - Reverted aarch64 vtable stubs code to conform to jdk7
  - Reverted assembler_aarch64.cpp/hpp to conform to jdk7
  - Reverted bytecodeInterpreter_aarch64 to conform to jdk7
  - Reverted global defs code to conform to jdk7
  - Reverted instr cache code to conform to jdk7
  - Reverted interpreter code to conform to jdk7
  - Reverted interpreter masm code to conform to jdk7
  - Reverted jni code to conform to jdk7
  - Reverted method handles code to conform to jdk7
  - Reverted native instr code to conform to jdk7
  - Reverted os_cpu/linux_aarch64 code to conform to jdk7
  - Reverted reloc info code to conform to jdk7
  - Revert Method:: etc to methodOopDesc:: etc
  - Scripts to build aarch64-x86 hybrid and aarch64 native debug
    images
  - Some errors revealed when building debug image
  - Temporarily disable running test_gamma
  - Tidy up allocation prefetch
  - Use correct post-increment size in repne_scanw
  - Use membar rules and delete special case volatile rules
  - Use method register to access counter increment field
  - Use movoop in C1 ic_call to keep verifier happy
  - Use os::malloc to allocate the register map
  - Use the correct return value from the VM resolve call
  - Use TLS for ThreadLocalStorage::thread()
  - Various changes to accommodate inclusion of ppc port in
    icedtea7
  - Various concurrency fixes
  - Work around weird compiler issue
- Removed patch: 7085757-currency_fix.patch
  * Integrated in this release</changelog>
<changelog author="fstrba@suse.com" date="1422187200">- Added patch: java-1_7_0-openjdk-giflib5.patch
  * Fix build with giflib 5.1.x</changelog>
<changelog author="schwab@suse.de" date="1422273600">- java-1_7_0-openjdk-giflib5.patch: Fix check for giflib &gt;= 5.1.</changelog>
<changelog author="fstrba@suse.com" date="1426075200">- Remove commented-out in-build gpg verification and gpg-offline
  build-dependency
  * Replaced by source_validator
- Reformat spec file with newer spec-cleaner</changelog>
<changelog author="fstrba@suse.com" date="1427803200">- Added patch:
  * arm32-jit.patch
  - Backport JIT hotspot for 32-bit arm architectures from
    icedtea7 repository</changelog>
<changelog author="fstrba@suse.com" date="1427976000">- Build again aarch64 hotspot as JIT accelerated</changelog>
<changelog author="fstrba@suse.com" date="1429099200">- Update to 2.5.5 - OpenJdk 7u79 (bsc#927591)
  * Security fixes
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8064601, CVE-2015-0480: Improve jar file handling
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699, CVE-2015-0469: Better glyph storage
  - S8068320, CVE-2015-0477: Limit applet requests
  - S8068720, CVE-2015-0488: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726, CVE-2015-0478: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931, CVE-2015-0460: Return of the phantom menace
  * Backports
  - S6584008, PR2193, RH1173326: jvmtiStringPrimitiveCallback
    should not be invoked when string value is null
  - S6956398, PR2250: make ephemeral DH key match the length of
    the certificate key
  - S7090424: TestGlyphVectorLayout failed automately with
    java.lang.StackOverflowError
  - S7142035: assert in j.l.instrument agents during shutdown
    when daemon thread is running
  - S7160837: DigestOutputStream does not turn off digest
    calculation when "close()" is called
  - S7195480: javax.smartcardio does not detect cards on Mac OS X
  - S8001472: api/java_awt/Window/indexTGF_* tests fail because
    expected colors aren't equal
  - S8011646: SEGV in compiled code with loop predication
  - S8012637: Adjust CipherInputStream class to work in AEAD/GCM
    mode
  - S8016545: java.beans.XMLEncoder.writeObject output is wrong
  - S8019324: assert(_f2 == 0 || _f2 == f2) failed: illegal field
    change
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8021804: Certpath validation fails if validity period of root
    cert does not include validity period of intermediate cert
  - S8022070: Compilation error in stubGenerator_sparc.cpp with
    some compilers
  - S8024061: Exception thrown when drag and drop between two
    components is executed quickly
  - S8028616: Htmleditorkit parser doesn't handle leading slash (/)
  - S8028617: Dvorak keyboard mapping not honored when ctrl key
    pressed
  - S8029837: NPE seen in XMLDocumentFragmentScannerImpl.setProperty
    since 7u40b33
  - S8031290: Adjust call to getisax() for additional words
    returned
  - S8032872: [macosx] Cannot select from JComboBox in a JWindow
  - S8032874: ArrayIndexOutOfBoundsException in JTable while
    clearing data in JTable
  - S8032878: Editable combos in table do not behave as expected
  - S8033113: wsimport fails on WSDL:header parameter name
    customization
  - S8033696: "assert(thread != NULL) failed: just checking" due
    to Thread::current() and JNI pthread interaction
  - S8036022: D3D: rendering with XOR composite causes
    InternalError.
  - S8036709: Java 7 jarsigner displays warning about cert policy
    tree
  - S8036819: JAB: mneumonics not read for textboxes
  - S8036983: JAB:Multiselection Ctrl+CursorUp/Down and
    ActivateDescenderPropertyChanged event
  - S8037477: Reproducible hang of JAWS and webstart application
    with JAB 2.0.4
  - S8038925: Java with G1 crashes in dump_instance_fields using
    jmap or jcmd without fullgc
  - S8039050: Crash in C2 compiler at Node::rematerialize
  - S8039298: assert(base == NULL || t_adr-&gt;isa_rawptr() || ! phase-&gt;type(base)-&gt;higher_equal(TypePtr::NULL_PTR))
  - S8039319: (smartcardio) Card.transmitControlCommand() does
    not work on Mac OS X
  - S8040228: TransformerConfigurationException occurs with
    security manager, FSP and XSLT Ext
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh
    fails to cleanup files after it
  - S8041451: com.sun.jndi.ldap.Connection:ReadTimeout should
    abandon ldap request
  - S8041740: Test sun/security/tools/keytool/ListKeychainStore.sh
    fails on Mac
  - S8041979: sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042059: Various fixes to linux/sparc
  - S8042857: 14 stuck threads waiting for notification on
    LDAPRequest
  - S8043123: Hard crash with access violation exception when
    blitting to very large image
  - S8043200: Decrease the preference mode of RC4 in the enabled
    cipher suite list
  - S8043205: Incorrect system traps.h include path
  - S8043206: Fix signed vs. unsigned comparison warning in
    copy_sparc.hpp
  - S8043207: Add const to Address argument for Assembler::swap
  - S8043210: Add _BIG_ENDIAN define on linux/sparc
  - S8043507: javax.smartcardio.CardTerminals.list() fails on
    MacOSX
  - S8044602: Increment minor version of HSx for 7u72 and
    initialize the build number
  - S8044659: Java SecureRandom on SPARC T4 much slower than on
    x86/Linux
  - S8046769: Set T family feature bit on Niagara systems
  - S8048080: (smartcardio) javax.smartcardio.Card.openLogicalChannel()
    dosn't work on MacOSX
  - S8049081: Increment hsx 24.72 build to b02 for 7u72-b03
  - S8049542: C2: assert(size_in_words &lt;= (julong)max_jint)
    failed: no overflow
  - S8049787: Increment hsx 24.72 build to b03 for 7u72-b04
  - S8050158: Introduce system property to maintain RC4
    preference order
  - S8050165: linux-sparcv9: NMT detail causes
    assert((intptr_t*)younger_sp[FP-&gt;sp_offset_in_saved_window()] == (intptr_t*)((intptr_t)sp - STACK_BIAS))
    failed: younger_sp must be valid
  - S8050167: linux-sparcv9: hs_err file does not show any stack
    information
  - S8055714: Increment hsx 24.72 build to b04 for 7u72-b11
  - S8056211: api/java_awt/Event/InputMethodEvent/serial/index.html#Input[serial2002]
    failure
  - S8060072: Increment minor version of HSx for 7u79 and
    initialize the build number
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh
    fails for Mac and Linux
  - S8064532: 7u76 build failed with # 8041979
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java
    failed intermittently
  - S8065373: [macosx] jdk8, jdk7u60 Regression in Graphics2D
    drawing of derived Fonts
  - S8065709: Deadlock in awt/logging apparently introduced by
    8019623
  - S8065991: LogManager unecessarily calls JavaAWTAccess from
    within a critical section
  - S8068405: GenerateCurrencyData throws RuntimeException for
    old data
  - S8071591: java/util/logging/LogManagerAppContextDeadlock.java
    test started to fail due to JDK-8065991
  - S8072039: jdk7u79 l10n resource file translation update
  - S8072042: (tz) Support tzdata2015a
  - S8073226: Increment hsx 24.79 build to b02 for 7u79-b10
  - S8074312, PR2254: Enable hotspot builds on 4.x Linux kernels
  - S8074662: Update 3rd party readme and license for LibPNG
    v 1.6.16
  - S8075211: [TEST_BUG] Test
    sun/net/www/http/HttpClient/StreamingRetry.java fails with
    compilation error
  * Bug fixes
  - PR2196, RH1164762: jhat man page has broken URL
  - PR2200: Support giflib 5.1.0
  - PR2210: DGifCloseFile call should check the return value, not
    the error code, for failure
  - PR2225: giflib 5.1 conditional excludes 6.0, 7.0, etc.
  - PR2250: JSSE server is still limited to 768-bit DHE
  * ARM32 port
  - PR2228: Add ARM32 JIT
  - PR2297: Use the IcedTea 2.6.0 HotSpot for ARM32 by default
  - Several bug fixes to get Eclipse working
  * AArch64 port
  - Add java.lang.ref.Reference.get intrinsic to template
    interpreter
  - Fix implementation of InterpreterMacroAssembler::increment_mdp_data_at().
  - Remove insanely large stack allocation in entry frame.
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8029775: Solaris code cleanup
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8046233: VerifyError on backward branch
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054883: Segmentation error while running program
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8058583: Remove CompilationRepeat
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8059216: Make PrintGCApplicationStoppedTime print
    information about stopping threads
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8062229: Test failure of test_loggc_filename in 7u-cpu
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8064493: Increment the build value to b04 for hs24.76 in
    7u76-b08
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065765: Missing space in output message from -XX:+CheckEndorsedAndExtDirs
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8071947: AARCH64: frame::safe_for_sender() computes
    incorrect sender_sp value for interpreted frames
  - S8072129: [AARCH64] missing fix for 8066900
  - S8072483: AARCH64: aarch64.ad uses the wrong operand class
    for some operations
- Remove upstreamed patch:
  * java-1_7_0-openjdk-giflib5.patch
  * arm32-jit.patch</changelog>
<changelog author="fstrba@suse.com" date="1429185600">- Add patch:
  * linux_vs_sys_ptrace.patch
  - Fix type mismatch between linux/ptrace.h and sys/ptrace.h
    on some distributions</changelog>
<changelog author="fstrba@suse.com" date="1429704000">- Added patch:
  * aarch64-linking.patch
  - Fix undefined symbols to write_ref_array_pre in the aarch64
    hotspot tarball.</changelog>
<changelog author="fstrba@suse.com" date="1433160000">- Removed patch:
  * aarch64-linking.patch
  - Problem exists in both aarch64 and default hotspot with gcc5.
- Added patch:
  * icedtea-2.5.5-gcc5.patch
  - Fix build with gcc5.</changelog>
<changelog author="fstrba@suse.com" date="1433246400">- Added patch:
  * implicit-fortify-decl.patch
  - Fix implicit-fortify-decl error due tu missing include</changelog>
<changelog author="fstrba@suse.com" date="1433505600">- Added patch:
  * signed-overflow.patch
  - Upstream fix for signed overflow that makes
    ChunkPool::allocate go OOM</changelog>
<changelog author="fstrba@suse.com" date="1433937600">- Added patch:
  * zero-dummy.patch
  - Fix crash in ZERO VM built with gcc5</changelog>
<changelog author="tchvatal@suse.com" date="1434628800">- Use priority matching to ibm-java, always 5 bigger than it</changelog>
<changelog author="fstrba@suse.com" date="1437480000">- Update to 2.6.0 - OpenJDK 7u80
  * OpenJDK
  - S4792059: test/java/io/pathNames/GeneralSolaris.java fails on
    symbolic links
  - S4991647: PNGMetadata.getAsTree() sets bitDepth to invalid
    value
  - S5036554: unmarshal error on CORBA alias type in CORBA any
  - S6458027: Disabling IPv6 on a specific network interface
    causes problems
  - S6642881: Improve performance of Class.getClassLoader()
  - S6695379: Copy method annotations and parameter annotations to
    synthetic bridge methods
  - S6883953: java -client -XX:ValueMapInitialSize=0 crashes
  - S6931564: Incorrect display name of Locale for south africa
  - S6976528: PS: assert(!limit_exceeded || softrefs_clear)
    failed: Should have been cleared
  - S6984762: Invalid close of file descriptor '-1' in
    findZoneinfoFile
  - S6993873: java/awt/Focus/FocusOwnerFrameOnClick/FocusOwnerFrameOnClick.java
    test indicates ".a frame wasn't focused on click" jdk7 issue
    on linux
  - S7010989: Duplicate closure of file descriptors leads to
    unexpected and incorrect closure of sockets
  - S7017962: Obsolete link is used in URL class level spec
  - S7033533: realSync() doesn't work with Xfce
  - S7036518: TEST_BUG: add cygwin support to
    test/java/nio/charset/coders/CheckSJISMappingProp.sh
  - S7052170: javadoc -charset option generates wrong meta tag
  - S7145454: JVM wide monitor lock in Currency.getInstance(String)
  - S7152892: some jtreg tests fail with permission denied
  - S7153157: ClassValue.get does not return if computeValue calls
    remove
  - S7156459: Remove unnecessary get() from Currency.getInstance()
  - S7158636: InterfaceAddress.getBroadcast() returns invalid
    broadcast address on WLAN
  - S7160604: Using non-opaque windows - popups are initially not
    painted correctly
  - S7161320: TEST_BUG: java/awt/event/KeyEvent/SwallowKeyEvents/SwallowKeyEvents.java fails
    (Invalid key code)
  - S7164841: Improvements to the GC log file rotation
  - S7172176: test/sun/tools/jconsole/ImmutableResourceTest.sh
    failing
  - S7172865: PropertyDescriptor fails to work with setter method
    name if setter is non-void
  - S7178362: Socket impls should ignore unsupported proxy types
    rather than throwing
  - S7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S7180557: InetAddress.getLocalHost throws UnknownHostException
    on java7u5 on OSX
  - S7196009: SunPkcs11 provider fails to parse config path
    containing parenthesis
  - S7199674: (props) user.home property does not return an
    accessible location in sandboxed environment [macosx]
  - S8001633: Wrong alt processing during switching between
    windows.
  - S8002148: [TEST_BUG] The four lines printed are not the bold
    typeface.
  - S8004488: wrong permissions checked in krb5
  - S8006023: Embedded Builds fail management test because of
    requirement for UsePerfData being enabled.
  - S8008328: [partfait] Null pointer defererence in
    hotspot/src/cpu/x86/vm/frame_x86.inline.hpp
  - S8008386: (cs) Unmappable leading should be decoded to
    replacement.
  - S8008759: Do not let internal JDK zlib symbols leak out of
    fastdebug libzip.so
  - S8009258: TEST_BUG:java/io/pathNames/GeneralWin32.java fails
    intermittently
  - S8010371: getaddrinfo can fail with EAI_SYSTEM/EAGAIN, causes
    UnknownHostException to be thrown
  - S8010738: G1: Output for full GCs with +PrintGCDetails should
    contain perm gen/meta data size change info
  - S8011795: DOM Serializer prints stack traces to System.err
  - S8012625: Incorrect handling of HTTP/1.1 " Expect: 100-continue "
    in HttpURLConnection
  - S8012941: JSR 292: too deep inlining might crash compiler
    because of stack overflow
  - S8013098: [macosx] localized aqua_xx.properties are not
    included in rt.jar
  - S8013485: javac can't handle annotations with a &lt;clinit&gt; from
    a previous compilation unit
  - S8013849: Awt assert on Hashtable.cpp:124
  - S8014254: Selector in HttpServer introduces a 1000 ms delay
    when using KeepAlive
  - S8015586: [macosx] Test closed/java/awt/print/PrinterJob/PrintToDir.java
    fails on MacOSX
  - S8015628: Test Failure in closed/java/io/pathNames/GeneralSolaris.java
  - S8015780: java/lang/reflect/Method/GenericStringTest.java failing
  - S8016579: (process) IOException thrown by ProcessBuilder.start()
    method is incorrectly encoded
  - S8017212: File.createTempFile requires unnecessary "read"
    permission
  - S8019800: Test sun/tools/jcmd/jcmd-f.sh failing after JDK-8017011
  - S8019834: InetAddress.getByName hangs for bad IPv6 literals
  - S8020675: invalid jar file in the bootclasspath could lead to
    jvm fatal error
  - S8020829: NMT tests fail on platforms if NMT detail is not
    supported
  - S8022229: Intermittent test failures in sun/tools/jstatd
  - S8022531: [TEST_BUG] After double-click on the folder names,
    there is no 'OK' button in the dialog.
  - S8022836: JVM crashes in JVMTIENVBASE::GET_CURRENT_CONTENDED_MONITOR
    and GET_OWNED_MONITOR
  - S8024675: java/net/NetworkInterface/UniqueMacAddressesTest.java
    fails on Windows
  - S8024677: [TESTBUG] Move tests for classes in /testlibrary
  - S8024932: [TEST_BUG] [macosx] javax/swing/text/StyledEditorKit/8016833/bug8016833.java failed
  - S8025644: java/util/stream/test/org/openjdk/tests/java/util/stream/ToArrayOpTest.java
    fails with TestData): failure java.lang.AssertionError:
    expected [true] but found [false]
  - S8025710: Proxied HTTPS connections reused by HttpClient can
    send CONNECT to the server
  - S8025917: JDK demo applets not running with &gt;=7u40 or (JDK 8
    and JDK 9)
  - S8026245: InetAddress.getLocalHost crash if IPv6 disabled (macosx)
  - S8026303: CMS: JVM intermittently crashes with "FreeList of
    size 258 violates Conservation Principle" assert
  - S8027026: Change keytool -genkeypair to use -keyalg RSA
  - S8027348: (process) Enhancement of handling async close of
    ProcessInputStream
  - S8027695: There should be a space before % sign in Swedish locale
  - S8027961: Inet[4|6]Address native initializing code should check
    field/MethodID values
  - S8028073: race condition in ObjectMonitor implementation causing
    deadlocks
  - S8028074: InetAddress.getByName fails with UHE "invalid IPv6
    address" if host name starts with a-f
  - S8028159: C2: compiler stack overflow during inlining of
    @ForceInline methods
  - S8028280: ParkEvent leak when running modified runThese which
    only loads classes
  - S8028484: [TEST_BUG][macosx] closed/java/awt/MouseInfo/JContainerMousePositionTest fails
  - S8029073: (corba) New connection reclaimed when number of
    connection is greater than highwatermark
  - S8029190: VM_Version::determine_features() asserts on Fujitsu
    Sparc64 CPUs
  - S8029302: Performance regression in Math.pow intrinsic
  - S8029607, RH1230702, PR2418: Type of Service (TOS) cannot be
    set in IPv6 header
  - S8029775: Solaris code cleanup
  - S8030114: [parfait] warnings from b119 for
    jdk.src.share.native.sun.security.smartcardio: JNI exception
    pending
  - S8030192: TESTFAIL: java/util/logging/TestLoggerBundleSync.java
    failed with NPE
  - S8030712: TEST_BUG : java/lang/ProcessBuilder/BasicLauncher.java
    fails if java output contains VM warning
  - S8030878: JConsole issues meaningless message if SSL connection
    fails
  - S8030976: Untaken paths should be more vigorously pruned at
    highest optimization level
  - S8031061: new hotspot build - hs24.60-b07
  - S8031068: java/util/logging/ParentLoggersTest.java:
    checkLoggers: getLoggerNames() returned unexpected loggers
  - S8031435: Ftp download does not work properly for ftp user
    without password
  - S8031471: Test closed/java/awt/dnd/FileDialogDropTargetTest/FileDialogDropTargetTest.java
    fails on Solaris zones virtual hosts
  - S8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
  - S8031572: jarsigner -verify exits with 0 when a jar file is not
    properly signed
  - S8031743: C2: loadI2L_immI broken for negative memory values
  - S8031764: tmtools/jmap/heap_config tests fail on Linux-ia32
    because it Cant attach to the core file
  - S8031765: Child process error stream is not empty!
  - S8032466: serviceability/sa/jmap-hashcode/Test8028623.java
    fails with compilation errors
  - S8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream)
    does not throw CertificateException for invalid input
  - S8032808: Support Solaris SO_FLOW_SLA socket option
  - S8032832: Applet/browser deadlocks, when IIS integrated
    authentication is used
  - S8032864: [macosx] sigsegv (0Xb) Being Generated When Starting
    JDev With Voiceover Running
  - S8032901: WaitForMultipleObjects() return value not handled
    appropriately
  - S8032908: getTextContent doesn't return string in JAXP
  - S8033524: Set minor version for hotspot in 7u80 to 80 and
    build number to b01
  - S8033571: [parfait] warning from b128 for security/smartcardio/pcsc_md.c:
    JNI exception pending
  - S8033627: UTC+02:00 time zones are not detected correctly on
    Windows
  - S8033699: Incorrect radio button behavior
  - S8033970: new hotspot build - hs24.80-b02
  - S8034118: [parfait] JNI exception pending in
    macosx/native/sun/awt/JavaComponentAccessibility.m
  - S8034262: Test java/lang/ProcessBuilder/CloseRace.java fails
  - S8034768: [parfait] JNI exception pending in
    jdk/src/macosx/native/sun/awt/JavaTextAccessibility.m
  - S8034920: new hotspot build - hs24.80-b03
  - S8035435: new hotspot build - hs24.80-b04
  - S8035973: NPE in ForwardBuilder
  - S8035938: Memory leak in JvmtiEnv::GetConstantPool
  - S8036778: new hotspot build - hs24.80-b05
  - S8036823: Stack trace sometimes shows 'locked' instead of
    'waiting to lock'
  - S8036981: JAXB not preserving formatting for xsd:any Mixed
    content
  - S8037502: build.tools.javazic.Zoneinfo incorrectly calculates
    raw GMT offset change time
  - S8037945: Paths.get("").normalize() throws ArrayIndexOutOfBoundsException
  - S8038274: update 8u fix for 8028073 now that 8028280 is
    backported to 8u
  - S8038440: backport few C2 fixes
  - S8038481: CMM Testing: Min/MaxHeapFreeRatio flags should be
    manageable through the API
  - S8038640: new hotspot build - hs24.80-b06
  - S8038785: hot workaround fix for a crash in C2 compiler at
    Node::rematerialize
  - S8038919: Requesting focus to a modeless dialog doesn't work
    on Safari
  - S8038961: kinit, klist and ktab aren't built from jdk7u51 in
    licensee src bundles
  - S8038966: JAX-WS handles wrongly xsd:any arguments for Web
    services
  - S8039042: G1: Phantom zeros in cardtable
  - S8039118: Windows build failure (j2pcsc.dll : fatal error
    unresolved external symbol throwByName)
  - S8039292: new hotspot build - hs24.80-b07
  - S8039368: Remove testcase from npt utf.c
  - S8039891: Remove ppcsflt builds from JPRT
  - S8039899: Missing licence headers in test for JDK-8033113
  - S8040076: Memory leak: java.awt.List objects allowing multiple
    selections are not GC-ed.
  - S8040664: Revert temporary fix JDK-8038785
  - S8041351: Crash in src/share/vm/opto/loopnode.cpp:3215 -
    assert(! had_error) failed: bad dominance
  - S8041507: Java Access Bridge version strings need to be fixed
  - S8041725: Nimbus JList selection colors persist across L&amp;F changes
  - S8041791: String.toLowerCase regression - violates Unicode standard
  - S8041918: BootstrapMethods attribute cannot be empty.
  - S8041931: test/sun/net/www/http/HttpClient/B8025710.java
    fails with cannot find keystore
  - S8041980: (hotspot) sun/jvmstat/monitor/MonitoredVm/CR6672135.java
    failing on all platforms
  - S8041984: CompilerThread seems to occupy all CPU in a very
    rare situation
  - S8042052: assert(t != NULL) failed: must set before get
  - S8042235: redefining method used by multiple MethodHandles
    crashes VM
  - S8042247: Make 7u60 the default jprt release for hs24.80
  - S8042250: Misleading command line output for
    ReservedCodeCacheSize validation
  - S8042465: Applet menus not rendering when browser is full
    screen on Mac
  - S8042835: Remove mnemonic character from open, save and open
    directory JFileChooser's buttons
  - S8042982: Unexpected RuntimeExceptions being thrown by SSLEngine
  - S8043129: JAF initialisation in SAAJ clashing with the one in
    javax.mail
  - S8043354: OptimizePtrCompare too aggressive when allocations
    are present
  - S8043413: REGRESSION: Hotspot causes segmentation fault in
    jdk8ux, but not in jdk7ux
  - S8043720: (smartcardio) Native memory should be handled more
    accurately
  - S8044406: JVM crash with JDK8 (build 1.8.0-b132) with G1 GC
  - S8044614: [macosx] Focus issue with 2 applets in firefox
  - S8044725: Bug in zlib 1.2.5 prevents inflation of some gzipped
    files (zlib 1.2.8 port)
  - S8046007: Java app receives javax.print.PrintException: Printer
    is not accepting job
  - S8046024: JDI shared memory transport failed with "Observed
    abandoned IP mutex"
  - S8046233: VerifyError on backward branch
  - S8046269: Build broken : THIS_FILE : undeclared identifier
  - S8046275: Fastdebug build failing on jdk9/hs/ control jobs
    after pulling some hs-comp changes
  - S8046287: [TESTBUG] runtime/Thread/TestThreadDumpMonitorContention.java
    failed error_cnt=12
  - S8046289: compiler/6340864/TestLongVect.java timeout with
  - S8046495: KeyEvent can not be accepted in quick mouse clicking
  - S8046516: Segmentation fault in JVM (easily reproducible)
  - S8046559: NPE when changing Windows theme
  - S8046588: test for SO_FLOW_SLA availability does not check for
    EACCESS
  - S8047186: jdk.net.Sockets throws InvocationTargetException
    instead of original runtime exceptions
  - S8047187: Test jdk/net/Sockets/Test.java fails to compile
    after fix JDK-8046588
  - S8047340: (process) Runtime.exec() fails in Turkish locale
  - S8048050: Agent NullPointerException when rmi.port in use
  - S8048110: Using tables in JTextPane leads to infinite loop in
    FlowLayout.layoutRow
  - S8048170: Test closed/java/text/Normalizer/ConformanceTest.java
    failed
  - S8048212, PR2418: Two tests failed with
    "java.net.SocketException: Bad protocol option" on Windows
    after 8029607
  - S8048271: Minor GC times doubled from JDK 6u35 to JDK 7u51
  - S8048506: [macosx] javax.swing.PopupFactory issue with null owner
  - S8048887: SortingFocusTraversalPolicy throws
    IllegalArgumentException from the sort method
  - S8049514: FEATURE_SECURE_PROCESSING can not be turned off on a
    validator through SchemaFactory
  - S8049684: pstack crashes on java core dump
  - S8050022: linux-sparcv9: assert(SharedSkipVerify || obj-&gt;is_oop())
    failed: sanity check
  - S8050386: javac, follow-up of fix for JDK-8049305
  - S8050983: Misplaced parentheses in sun.net.www.http.HttpClient
    break HTTP PUT streaming
  - S8051004: javac, incorrect bug id in tests for JDK-8050386
  - S8051844: BootstrapMethods attribute cannot be empty again
  - S8051857: OperationTimedOut exception inside from
    XToolkit.syncNativeQueue call
  - S8052159: TEST_BUG: javax/swing/JTextField/8036819/bug8036819.java
    fails to compile
  - S8052406: SSLv2Hello protocol may be filter out unexpectedly
  - S8054019: Keytool Error publicKey's is not X.509, but X509
  - S8054478: C2: Incorrectly compiled char[] array access crashes
    JVM
  - S8054530: C2: assert(res == old_res) failed: Inconsistency
    between old and new
  - S8054817: File ccache only recognizes Linux and Solaris defaults
  - S8054841: (process) ProcessBuilder leaks native memory
  - S8054883: Segmentation error while running program
  - S8055045: StringIndexOutOfBoundsException while reading
    krb5.conf
  - S8055421: (fs) bad error handling in java.base/unix/native/libnio/fs/UnixNativeDispatcher.c
  - S8055731: sun/security/smartcardio/TestDirect.java throws
    java.lang.IndexOutOfBoundsException
  - S8055949: ByteArrayOutputStream capacity should be maximal
    array size permitted by VM
  - S8056026: Debug security logging should print Provider used
    for each crypto operation
  - S8056156: [TEST_BUG] Test javax/swing/JFileChooser/8046391/bug8046391.java
    fails in Windows
  - S8056309: Set minor version for hotspot in 7u76 to 76 and
    build number to b01
  - S8056914: Right Click Menu for Paste not showing after
    upgrading to java 7
  - S8057008: [TEST_BUG] Test java/awt/Focus/SortingFPT/JDK8048887.java
    fails with compilation error
  - S8057530: (process) Runtime.exec throws garbled message in jp
    locale
  - S8057564: JVM hangs at getAgentProperties after attaching to
    VM with lower
  - S8057813: Alterations to jdk_security3 test target
  - S8058113: Execution of OnOutOfMemoryError command hangs on
    linux-sparc
  - S8058120: Rendering / caret errors with HTMLDocument
  - S8058473: "Comparison method violates its general contract"
    when using Clipboard
  - S8058583: Remove CompilationRepeat
  - S8058608: JVM crash during Kerberos logins using des3-cbc-md5
    on OSX
  - S8058927: ATG throws ClassNotFoundException
  - S8058932: java/net/InetAddress/IPv4Formats.java failed because
    hello.foo.bar does exist
  - S8058935: CPU detection gives 0 cores per cpu, 2 threads per
    core in Amazon EC2 environment
  - S8058936: hotspot/test/Makefile should use jtreg script from
    $JT_HOME/bin/jreg (instead of $JT_HOME/win32/bin/jtreg)
  - S8059216: Make PrintGCApplicationStoppedTime print information
    about stopping threads
  - S8059299: assert(adr_type != NULL) failed: expecting TypeKlassPtr
  - S8059327: XML parser returns corrupt attribute value
  - S8059563: (proxy) sun.misc.ProxyGenerator.generateProxyClass
    should create intermediate directories
  - S8060006: No Russian time zones mapping for Windows
  - S8060169: Update the Crash Reporting URL in the Java crash log
  - S8060170: Support SIO_LOOPBACK_FAST_PATH option on Windows
  - S8061507: Increment hsx 24.76 build to b02 for 7u76-b05
  - S8061694: Increment hsx 24.76 build to b03 for 7u76-b06
  - S8061954: 7u76 - deployment warning dialogs do not work on Linux
  - S8062021: NPE in sun/lwawt/macosx/CPlatformWindow::toFront
    after JDK-8060146
  - S8062170: java.security.ProviderException: Error parsing
    configuration with space
  - S8062178: merge issue: Test closed/java/util/TimeZone/Bug6329116.java
    fails in 7u-cpu nightly
  - S8062608: BCEL corrupts debug data of methods that use generics
  - S8062672: JVM crashes during GC on various asserts which
    checks that HeapWord ptr is an oop
  - S8062744: jdk.net.Sockets.setOption/getOption does not support
    IP_TOS
  - S8062771: Core reflection should use final fields whenever
    possible
  - S8062923: XSL: Run-time internal error in 'substring()'
  - S8062924: XSL: wrong answer from substring() function
  - S8064391: More thread safety problems in core reflection
  - S8064407: (fc) FileChannel transferTo should use TransmitFile
    on Windows
  - S8064493: Increment the build value to b04 for hs24.76 in 7u76-b08
  - S8064516: BCEL still corrupts generic methods if bytecode
    offsets are modified
  - S8064533: Remove and retag jdk7u76-b08 tag in 7u76/jdk repo
  - S8064667: Add -XX:+CheckEndorsedAndExtDirs flag to JDK 8
  - S8064846: Lazy-init thread safety problems in core reflection
  - S8065098: JColorChooser no longer supports drag and drop
    between two JVM instances
  - S8065238, PR2478: javax.naming.NamingException after upgrade
    to JDK 8
  - S8065552: setAccessible(true) on fields of Class may throw a
    SecurityException
  - S8065553: Failed Java web start via IPv6 (Java7u71 or later)
  - S8065609: 7u76 l10n resource file translation update
  - S8065618: C2 RA incorrectly removes kill projections
  - S8065674: javac generates incorrect LVT table for trivial cases
  - S8065765: Missing space in output message
    from -XX:+CheckEndorsedAndExtDirs
  - S8065994: HTTP Tunnel connection to NTLM proxy reauthenticates
    instead of using keep-alive
  - S8066045: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8066103: C2's range check smearing allows out of bound array
    accesses
  - S8066612: Add a test that will call getDeclaredFields() on all
    classes and try to set them accessible.
  - S8066649: 8u backport for 8065618 is incorrect
  - S8066756: Test test/sun/awt/dnd/8024061/bug8024061.java fails
  - S8066775: opto/node.hpp:355, assert(i &lt; _max) failed: oob: i=1, _max=1
  - S8068338: Better message about incompatible zlib in Deflater.init
  - S8068507: (fc) Rename the new jdk.net.enableFastFileTransfer
    system property to jdk.nio.enableFastFileTransfer
  - S8068625: Remove extra year check for GenerateCurrencyData fix
  - S8068639: Make certain annotation classfile warnings opt-in
  - S8071423: Increment hsx 24.80 build to b08 for 7u80-b07
  - S8071499: java/net/InetAddress/B5087907.java fails with jdk7u85
  - S8071807: Increment hsx 24.80 build to b09 for 7u80-b08
  - S8072040: jdk7u80 l10n resource file translation update
  - S8072458: jdk/test/Makefile references (to be removed) win32
    directory in jtreg
  - S8072639: Increment hsx 24.80 build to b10 for 7u80-b09
  - S8074855: [Regression] Test closed/java/awt/image/Raster/IncorrectScanlineStrideTest.java fails
  - S8075092: Remove erroneous println statement from DoubleByteDecoder
  * Backports
  - S4890063, PR2305, RH1214835: HPROF: default text truncated
    when using doe=n option
  - S6991580, PR2308, RH1210739: IPv6 Nameservers in resolv.conf
    throws NumberFormatException
  - S8021120, PR2301: TieredCompilation can be enabled even if
    TIERED is undefined
  - S8025613, PR2437: clang: remove -Wno-unused-value
  - S8039921, PR2421: SHA1WithDSA with key &gt; 1024 bits not working
  - S8048214, PR2357, G548784: Linker error when compiling
    G1SATBCardTableModRefBS after include order changes
  - S8072385, PR2387: Only the first DNSName entry is checked for
    endpoint identification
  - S8074761, PR2470, RH1194226: Empty optional parameters of LDAP
    query are not interpreted as empty
  - S8075136: Unnecessary sign extension for byte array access
  - S8076212, PR2314: AllocateHeap() and ReallocateHeap() should be
    inlined.
  - S8078654, PR2333: CloseTTFontFileFunc callback should be removed
  - S8078666, PR2326: JVM fastdebug build compiled with GCC 5 asserts
    with "widen increases"
  - S8081315, PR2405: Avoid giflib interlacing workaround with
    giflib 5.0.0 on
  - S8081475, PR2494: SystemTap does not work when JDK is compiled
    with GCC 5
  * Bug fixes
  - PR94: empty install target in Makefile.am
  - PR1374: Provide option to strip and link debugging info after
    build
  - PR1661: Cleanup SYSTEM_GCONF option and allow it to be set
    false
  - PR1786: Allow x86 build to occur on x86_64 using a previously
    built x86_64 build
  - PR1816: Split download/extraction rules for OpenJDK so they
    can run in parallel
  - PR1846: Build fails when using IcedTea7 as bootstrap JDK with
    native ecj
  - PR1847: Synchronise javac.in with IcedTea6
  - PR1883: Search Debian multiarch paths when looking for pcsclite
  - PR1888: Allow tarball checksumming to be disabled
  - PR2060: Fix warnings found by Gentoo ebuild QA with gcc 4.9.1
  - PR2144: make dist fails due to lack of HotSpot-specific patches
  - PR2161: RHEL 6 has a version of GIO which meets the version
    criteria, but has no g_settings_*
  - PR2233, RH1190835: Discover gsettings symbols separately so
    early versions of GLib can be used (e.g. on RHEL 6)
  - PR2236, RH1191652: ppc64le should report its os.arch as ppc64le
    so tools can detect it
  - PR2320: Allow use of system GConf
  - PR2323: System GConf without system GIO configuration broken
  - PR2328: GCJ uses ppc64el named libarch directory on ppc64le
  - PR2341: Update README &amp; INSTALL files
  - PR2359: Ensure all stamp targets have aliases
  - PR2390: Make elliptic curve removal optional
  - PR2394: ppc64le does not support -Xshare:dump
  - PR2395: Path to jvm.cfg is wrong in add-systemtap-boot
  - PR2446: Support system libsctp
  - PR2458: Policy JAR files should be timestamped with the date
    of the policy file they hold
  - PR2482, RH489586, RH1236619: OpenJDK can't handle spaces in
    zone names in /etc/sysconfig/clock
  - PR2496: Enable system PCSC support by default
  - PR2499: Update remove-intree-libraries.sh script
  - PR2507, G541462: Only apply PaX markings by default on running
    PaX kernels
  - PR2530: PaX mark the installed JDK so it runs on hardened
    systems
  - PR2531: Location of docs directory in install-data-local is
    incorrect
  - PR2532: install stage fails where
    BUILD_ARCH_DIR != INSTALL_ARCH_DIR
  - PR2533: Allow greater control of Javadoc installation directory
  - PR2534: Install TRADEMARK, COPYING and ChangeLog as RPM spec
    file does
  - PR2535: install-data-local needs to check that classes.jsa
    actually exists
  - PR2537: Desktop files do not allow installation from multiple
    versions of IcedTea
  - PR2539: Libraries in some subdirectories of jre/lib/{arch} are
    not installed
  - PR2540: Specify a cacerts file for the OpenJDK build as we do
    for OpenJDK 8
  - PR2545: Extend tarball checksumming option to allow the
    checksum to be specified
  - PR2548: install stage doesn't install symbolic links
  - PR2550: Desktop file doesn't reference versioned icon
  * AArch64 port
  - Add copyright to aarch64_ad.m4
  - S8069593: Changes to JavaThread::_thread_state must use acquire
    and release
  - S8074349: AARCH64: C2 generates poor code for some byte and
    character stores
  - S8075045: AARCH64: Stack banging should use store rather than
    load
  - S8075324: Costs of memory operands in aarch64.ad are inconsistent
  - S8075443: AARCH64: Missed L2I optimizations in C2
  - S8075930: AARCH64: Use FP Register in C2
  - S8076467: AARCH64: assertion fail with -XX:+UseG1GC
  - S8079203: AARCH64: Need to cater for different partner
    implementations
  - S8080586: aarch64: hotspot test
    compiler/codegen/7184394/TestAESMain.java fails
  * PPC &amp; AIX port
  - Changes to make aix compile after the merge
  - S8069590: AIX port of "8050807: Better performing performance
    data handling"
  - S8078482, PR2307, RH1201393: ppc: pass thread to
    throw_AbstractMethodError
  - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
- Removed patches:
  * icedtea-2.5.5-gcc5.patch
  * implicit-fortify-decl.patch
  * linux_vs_sys_ptrace.patch
  * signed-overflow.patch
  - Applied upstream
  * openjdk-7-src-b147-stringcompare.patch
  - Fixed by refactoring of the surrounding code
- Modified patch:
  * java-1_7_0-openjdk-suse-desktop-files.patch
  - Adapted to icedtea 2.6.0 content</changelog>
<changelog author="fstrba@suse.com" date="1437480001">- Update to 2.6.1 - OpenJDK 7u85 (bsc#938248)
  * Security fixes
  - S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
  - S8067694, CVE-2015-2625: Improved certification checking
  - S8071715, CVE-2015-4760: Tune font layout engine
  - S8071731: Better scaling for C1
  - S8072490: Better font morphing redux
  - S8072887: Better font handling improvements
  - S8073334: Improved font substitutions
  - S8073773: Presume path preparedness
  - S8073894: Getting to the root of certificate chains
  - S8074330: Set font anchors more solidly
  - S8074335: Substitute for substitution formats
  - S8074865, CVE-2015-2601: General crypto resilience changes
  - S8074871: Adjust device table handling
  - S8075374, CVE-2015-4748: Responding to OCSP responses
  - S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
  - S8075738: Better multi-JVM sharing
  - S8075833, CVE-2015-2613: Straighter Elliptic Curves
  - S8075838: Method for typing MethodTypes
  - S8075853, CVE-2015-2621: Proxy for MBean proxies
  - S8076328, CVE-2015-4000: Enforce key exchange constraints
  - S8076376, CVE-2015-2628: Enhance IIOP operations
  - S8076397, CVE-2015-4731: Better MBean connections
  - S8076401, CVE-2015-2590: Serialize OIS data
  - S8076405, CVE-2015-4732: Improve serial serialization
  - S8076409, CVE-2015-4733: Reinforce RMI framework
  - S8077520, CVE-2015-2632: Morph tables into improved form
  - PR2487, CVE-2015-4000: Make jdk8 mode the default for
    jdk.tls.ephemeralDHKeySize
  * OpenJDK
  - S7124253: [macosx] Flavor change notification not coming
  - S8007219: [macosx] Frame size reverts meaning of maximized
    attribute if frame size close to display
  - S8013581: [macosx] Key Bindings break with awt
    GraphicsEnvironment setFullScreenWindow
  - S8014464: Update jcheck for OpenJDK 7
  - S8020210: [macosx] JVM crashes in CWrapper$NSWindow.screen(long)
  - S8027058: sun/management/jmxremote/bootstrap/RmiBootstrapTest.sh
    Failed to initialize connector
  - S8027561: [macosx] Cleanup "may not respond to selector"
    warnings in native code
  - S8029868: Fix KSS issues in sun.lwawt.macosx
  - S8042205: javax/management/monitor/*: some tests didn't get
    all the notifications
  - S8043201: Deprecate RC4 in SunJSSE provider
  - S8046817: JDK 8 schemagen tool does not generate xsd files
    for enum types
  - S8048194: GSSContext.acceptSecContext fails when a supported
    mech is not initiator preferred
  - S8064546: CipherInputStream throws BadPaddingException if
    stream is not fully read
  - S8065764: javax/management/monitor/CounterMonitorTest.java hangs
  - S8066952: [TEST-BUG] javax/management/monitor/CounterMonitorTest.java
    hangs
  - S8068674: Increment minor version of HSx for 7u85 and
    initialize the build number
  - S8071668: [macosx] Clipboard does not work with 3rd parties
    Clipboard Managers
  - S8073357: schema1.xsd has wrong content. Sequence of the enum
    values has been changed
  - S8073385: Bad error message on parsing illegal character in
    XML attribute
  - S8074098: 2D_Font/Bug8067699 test fails with SIGBUS crash on
    Solaris Sparc
  - S8074297: substring in XSLT returns wrong character if string
    contains supplementary chars
  - S8075575: com/sun/security/auth/login/ConfigFile/InconsistentError.java
    failed in certain env.
  - S8075576: com/sun/security/auth/module/KeyStoreLoginModule/OptionTest.java
    failed in certain env.
  - S8075667: (tz) Support tzdata2015b
  - S8076290: JCK test api/xsl/conf/string/string17 starts failing
    after JDK-8074297
  - S8077685: (tz) Support tzdata2015d
  - S8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
    fails with BindException
  - S8078439: SPNEGO auth fails if client proposes MS krb5 OID
  - S8078529: Increment the build value to b02 for hs24.85 in 7u85
  - S8078562: Add modified dates
  - S8080318: jdk8u51 l10n resource file translation update
  - S8081386: Test sun/management/jmxremote/bootstrap/RmiSslBootstrapTest.sh
    test has RC4 dependencies
  - S8081622: Increment the build value to b03 for hs24.85 in 7u85
  - S8081775: two lib/testlibrary tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - OJ01: Allow OpenJDK to build on PaX-enabled kernels
  - OJ02: Fix build where PAX_COMMAND is not specified
  - OJ03: Only apply PaX-marking when needed by a running PaX kernel
  - OJ04: Revert introduction of lambda expression in
    sun.lwawt.macosx.LWCToolkit
  - OJ05: Fix mistake in 8075374 backport
  * Backports
  - S8087120, RH1206656, PR2553: [GCC5] java.lang.StackOverflowError
    on  Zero JVM initialization on non x86 platforms.
  * Bug fixes
  - PR2501: libjavasctp.so doesn't need to link against libdl when
    linking against libsctp
  - PR2502: Remove -fno-tree-vectorize workaround now
    http://gcc.gnu.org/PR63341 is fixed
  - PR2503: Add existence check for all optional dependencies in
    jdk_generic_profile.sh
  - PR2521: Systems with a GLib without libgio segfault when
    obtaining proxy information
- Removed patch:
  * zero-dummy.patch
  - Integrated in icedtea 2.6.1</changelog>
<changelog author="fstrba@suse.com" date="1443528000">- Add option to build Sun Elliptical Curve Crypto provider
  * Enable for openSUSE:Factory
- Added patch:
  * icedtea-2.6.1-sunec.patch
  - make it easier to link the SUNEC Crypto provider</changelog>
<changelog author="fstrba@suse.com" date="1445601600">- Update to 2.6.2 - OpenJDK 7u91 (bsc#951376)
  * Security fixes
  - S8048030, CVE-2015-4734: Expectations should be consistent
  - S8068842, CVE-2015-4803: Better JAXP data handling
  - S8076339, CVE-2015-4903: Better handling of remote object
    invocation
  - S8076383, CVE-2015-4835: Better CORBA exception handling
  - S8076387, CVE-2015-4882: Better CORBA value handling
  - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency
  - S8076413, CVE-2015-4883: Better JRMP message handling
  - S8078427, CVE-2015-4842: More supportive home environment
  - S8078440: Safer managed types
  - S8080541: More direct property handling
  - S8080688, CVE-2015-4860: Service for DGC services
  - S8081760: Better group dynamics
  - S8086092, CVE-2015-4840: More palette improvements
  - S8086733, CVE-2015-4893: Improve namespace handling
  - S8087350: Improve array conversions
  - S8103671, CVE-2015-4805: More objective stream classes
  - S8103675: Better Binary searches
  - S8130078, CVE-2015-4911: Document better processing
  - S8130193, CVE-2015-4806: Improve HTTP connections
  - S8130864: Better server identity handling
  - S8130891, CVE-2015-4843: (bf) More direct buffering
  - S8131291, CVE-2015-4872: Perfect parameter patterning
  - S8132042, CVE-2015-4844: Preserve layout presentation
  * Import of OpenJDK 7 u85 build 2
  - S8133968: Revert 8014464 on OpenJDK 7
  - S8133993: [TEST_BUG] Make CipherInputStreamExceptions compile
    on OpenJDK 7
  - S8134248: Fix recently backported tests to work with OpenJDK
    7u
  - S8134610: Mac OS X build fails after July 2015 CPU
  - S8134618: test/javax/xml/jaxp/transform/8062923/XslSubstringTest.java
    has bad license header
  * Import of OpenJDK 7 u91 build 0
  - S6854417: TESTBUG: java/util/regex/RegExTest.java fails
    intermittently
  - S6966259: Make PrincipalName and Realm immutable
  - S8005226: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8014097: add doPrivileged methods with limited privilege
    scope
  - S8021191: Add isAuthorized check to limited doPrivileged
    methods
  - S8028780: JDK KRB5 module throws OutOfMemoryError when CCache
    is corrupt
  - S8064331: JavaSecurityAccess.doIntersectionPrivilege() drops
    the information about the domain combiner of the stack ACC
  - S8076506: Increment minor version of HSx for 7u91 and
    initialize the build number
  - S8078822: 8068842 fix missed one new file
    PrimeNumberSequenceGenerator.java
  - S8079323: Serialization compatibility for Templates: need to
    exclude Hashtable from serialization
  - S8087118: Remove missing package from java.security files
  - S8098547: (tz) Support tzdata2015e
  - S8130253: ObjectStreamClass.getFields too restrictive
  - S8133321: (tz) Support tzdata2015f
  - S8135043: ObjectStreamClass.getField(String) too restrictive
  * Import of OpenJDK 7 u91 build 1
  - S8072932: Test fails with java.security.AccessControlException:
    access denied ("java.security.SecurityPermission"
    "getDomainCombiner")
  * Backports
  - S6880559, PR2674: Enable PKCS11 64-bit windows builds
  - S6904403, PR2674: assert(f == k-&gt;has_finalizer(),"inconsistent
    has_finalizer") with debug VM
  - S7011441, PR2674: jndi/ldap/Connection.java needs to avoid
    spurious wakeup
  - S7059542, PR2674: JNDI name operations should be locale
    independent
  - S7105461, PR2571: Large JTables are not rendered correctly with
    Xrender pipeline
  - S7105883, PR2560: JDWP: agent crash if there exists a
    ThreadGroup with null name
  - S7107611, PR2674: sun.security.pkcs11.SessionManager is
    scalability blocker
  - S7127066, PR2674: Class verifier accepts an invalid class file
  - S7150092, PR2674: NTLM authentication fail if user specified a
    different realm
  - S7150134, PR2571: JCK api/java_awt/Graphics/index.html#DrawLine
    fails with OOM for jdk8 with XRender pipeline
  - S7152582, PR2674: PKCS11 tests should use the NSS libraries
    available in the OS
  - S7156085, PR2674: ArrayIndexOutOfBoundsException throws in
    UTF8Reader of SAXParser
  - S7177045, PR2674: Rework the TestProviderLeak.java regression
    test, it is too fragile to low memory errors.
  - S7190945, PR2674: pkcs11 problem loading NSS libs on Ubuntu
  - S8005226, PR2674: java/rmi/transport/pinClientSocketFactory/PinClientSocketFactory.java
    fails intermittently
  - S8009438, PR2674: sun/security/pkcs11/Secmod tests failing on
    Ubuntu 12.04
  - S8011709, PR2509: [parfait] False positive: memory leak in
    jdk/src/share/native/sun/font/layout/CanonShaping.cpp
  - S8012971, PR2674: PKCS11Test hiding exception failures
  - S8016105, PR2560: Add complementary RETURN_NULL allocation
    macros in allocation.hpp
  - S8020424, PR2674: The NSS version should be detected before
    running crypto tests
  - S8020443, PR2674: Frame is not created on the specified
    GraphicsDevice with two monitors
  - S8021897, PR2560: EXCEPTION_ACCESS_VIOLATION on debugging
    String.contentEquals()
  - S8022683, PR2560: JNI GetStringUTFChars should return NULL on
    allocation failure not abort the VM
  - S8023052, PR2509: JVM crash in native layout
  - S8025922, PR2560: JNI access to Strings need to check if the
    value field is non-null
  - S8026119. PR2679: Regression test DHEKeySizing.java failing
    intermittently
  - S8027624, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    unstable again
  - S8033069, PR2674: mouse wheel scroll closes combobox popup
  - S8035150, PR2674: ShouldNotReachHere() in ConstantPool::copy_entry_to
  - S8039212, PR2674: SecretKeyBasic.sh needs to avoid NSS libnss3
    and libsoftokn3 version mismatches
  - S8042855, PR2509: [parfait] Potential null pointer dereference
    in IndicLayoutEngine.cpp
  - S8044364, PR2674: runtime/RedefineFinalizer test fails on windows
  - S8048353, PR2674: jstack -l crashes VM when a Java mirror for a
    primitive type is locked
  - S8050123, PR2674: Incorrect property name documented in CORBA
    InputStream API
  - S8056122, PR1896: Upgrade JDK to use LittleCMS 2.6
  - S8056124, PR2674: Hotspot should use PICL interface to get
    cacheline size on SPARC
  - S8057934, PR1896: Upgrade to LittleCMS 2.6 breaks AIX build
  - S8059200, PR2674: Promoted JDK9 b31 for Solaris-amd64 fails
    (Error: dl failure on line 744, no picl library) on Solaris 11.1
  - S8059588, PR2674: deadlock in java/io/PrintStream when verbose
    java.security.debug flags are set
  - S8062518, PR2674: AIOBE occurs when accessing to document
    function in extended function in JAXP
  - S8062591, PR2674: SPARC PICL causes significantly longer startup
    times
  - S8072863, PR2674: Replace fatal() with vm_exit_during_initialization()
    when an incorrect class is found on the bootclasspath
  - S8073453, PR2674: Focus doesn't move when pressing Shift + Tab
    keys
  - S8074350, PR2674: Support ISO 4217 "Current funds codes" table
    (A.2)
  - S8074869, PR2674: C2 code generator can replace -0.0f with
    +0.0f on Linux
  - S8075609, PR2674: java.lang.IllegalArgumentException: aContainer
    is not a focus cycle root of aComponent
  - S8075773, PR2674: jps running as root fails after the fix of
    JDK-8050807
  - S8076040, PR2674: Test com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    fails with -XX:+UseG1GC
  - S8076328, PR2679: Enforce key exchange constraints
  - S8076455, PR2674: IME Composition Window is displayed on
    incorrect position
  - S8076968, PR2674: PICL based initialization of L2 cache line
    size on some SPARC systems is incorrect
  - S8077102, PR2674: dns_lookup_realm should be false by default
  - S8077409, PR2674: Drawing deviates when validate() is invoked
    on java.awt.ScrollPane
  - S8078113, PR2674: 8011102 changes may cause incorrect results
  - S8078331, PR1896: Upgrade JDK to use LittleCMS 2.7
  - S8080012, PR2674: JVM times out with vdbench on SPARC M7-16
  - S8081392, PR2674: getNodeValue should return 'null' value for
    Element nodes
  - S8081470, PR2674: com/sun/jdi tests are failing with "Error.
    failed to clean up files after test" with jtreg 4.1 b12
  - S8081756, PR1896: Mastering Matrix Manipulations
  - S8130297, PR2674: com/sun/crypto/provider/KeyFactory/TestProviderLeak.java
    still failing after JDK-8076040
  - S8133636, PR2674: [TEST_BUG] Import/add tests for the problem
    seen in 8076110
  * Bug fixes
  - PR2512: Reset success following calls in LayoutManager.cpp
  - PR2557, G390663: Update Gentoo font configuration and allow font
    directory to be specified
  - PR2568: openjdk causes a full desktop crash on RHEL 6 i586
  - PR2683: AArch64 port has broken Zero on AArch64
  - PR2684: AArch64 port not selected on architectures where
    host_cpu != aarch64
  - PR2686: Add generated Fedora &amp; Gentoo font configurations for
    bootstrap stage
  * CACAO
  - PR2652: Set classLoader field in java.lang.Class as expected by
    JDK</changelog>

</package>
<package pkgid="841dca4eadfcb6c5b6b079d39086aa8110d1bd329b14f4ad009047dfb363255b" name="krb5" arch="src">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="5adfa3115f1c6f2a7b689c89108c9096646aad3621f4ed58a0fc0a9b321fb6c8" name="krb5" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="12c742220ec4b763b934600988c9e8b4e433f1e0045b1491e2405fcf4b5af5e3" name="krb5-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="f9e22515aeba463533de9ab4daf56d1989218947cc8538fa2689cda44666a48f" name="krb5-client" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="e5f1ac5233192c335f395a20507419be4b5429bb1441a8008d442a0ec5b54b3c" name="krb5-client-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="74eabec1b22a99b48d58e3336d6bb2dd3153503f9f5cdc8a49bf59d41bc52802" name="krb5-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="8df59a91faaa8baa362ebdb1e018c35ad6c71a163ed851b87b4245ae8f6aacc3" name="krb5-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="ec615a3235808ca5e4ec61a5d218cead2c236bc398c2fbd42d5b0f62e8b0a086" name="krb5-debugsource" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="0bca3dc8f19c0364d42ece554346271d1d5edc27e956cd3b36fff9b1b98758a3" name="krb5-devel" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="b84e9f7f61b6fce01c91a4b8e22d718fc2c1280ad107afecdf399b558bb69f23" name="krb5-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="2d33e7f87701a02c3a16dbddcacaec5f21b95562e9bd81ed867e61a77641c840" name="krb5-doc" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="b8ae40a60ce2205c91d58fe6323863d22884d1beb880b744bfc87fe3b8fcf170" name="krb5-mini" arch="src">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.de" date="1367582400">- let krb5-mini conflict with all main packages</changelog>
<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>

</package>
<package pkgid="eadb773f7d60049d59771b0ce816c75a890be2f7415ba1b78b6dac58fabb0f25" name="krb5-mini" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.de" date="1367582400">- let krb5-mini conflict with all main packages</changelog>
<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>

</package>
<package pkgid="9a48317cdf8102ce692e19c9dac4b220e1f9aa274d94117f460f2c7f856c43fb" name="krb5-mini-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.de" date="1367582400">- let krb5-mini conflict with all main packages</changelog>
<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>

</package>
<package pkgid="43663be8f7c6e39451f71caaaaefbdee0b52037a4516ff15fd5f8e1b1c67fbef" name="krb5-mini-debugsource" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.de" date="1367582400">- let krb5-mini conflict with all main packages</changelog>
<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>

</package>
<package pkgid="a5e0539716e733a3a8f7301f723ca6c3f503ddf6d2eb100f453392f3ae5062e6" name="krb5-mini-devel" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.de" date="1367582400">- let krb5-mini conflict with all main packages</changelog>
<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>

</package>
<package pkgid="93782641101dfa672d0da44b103fcdde16ad5c6f3ab4fa9b776eb769cce91196" name="krb5-plugin-kdb-ldap" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="1bd9a0c32551d4cb5e24be4e45f06d443e4daf0169002de1355aaca2211d6e07" name="krb5-plugin-kdb-ldap-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="37ce2c4447e2fb1628862a7a9cf6ecf73b202a789b91f4fc5a83553c8df5b428" name="krb5-plugin-preauth-otp" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="c785060065ce29e08cba407af987acbc7f5b442194670fa62064c6b6aac464c3" name="krb5-plugin-preauth-otp-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="d90cc468ee727b4d166ec1c2dfebad5591eb7828ca1b1bf6e10077df5d20cd31" name="krb5-plugin-preauth-pkinit" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="2c4c6c3eaad907bd36920251bb63df09d7dad9f31f990f624b32d672d20e48ea" name="krb5-plugin-preauth-pkinit-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="7d1a8c2e398b873ca3f48b0226214baa1bbc2c70efbaa5c67d6d7ea8fd8be5d9" name="krb5-server" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="105a73053fe7843e04a60fde8209a6598cea73a09531fe89b6ec1e768b108f40" name="krb5-server-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.1" rel="21.1"/>

<changelog author="mc@suse.com" date="1369742400">- cleanup systemd files (remove syslog.target)</changelog>
<changelog author="mc@suse.com" date="1370779200">- update to version 1.11.3
  - Fix a UDP ping-pong vulnerability in the kpasswd
    (password changing) service. [CVE-2002-2443]
  - Improve interoperability with some Windows native PKINIT clients.
- install translation files
- remove outdated configure options</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371816000">- remove fstack-protector-all from CFLAGS, just use the
  lighter/fast version already present in %optflags
- Use LFS_CFLAGS to build in 32 bit archs.</changelog>
<changelog author="mc@suse.com" date="1372075200">- install and enable systemd service files also in -mini package</changelog>
<changelog author="ckornacker@suse.com" date="1384516800">- update to version 1.11.4
  - Fix a KDC null pointer dereference [CVE-2013-1417] that could
    affect realms with an uncommon configuration.
  - Fix a KDC null pointer dereference [CVE-2013-1418] that could
    affect KDCs that serve multiple realms.
  - Fix a number of bugs related to KDC master key rollover.</changelog>
<changelog author="nfbrown@suse.com" date="1386676800">- Reduce build dependencies for krb5-mini by removing
  doxygen and changing libcom_err-devel to
  libcom_err-mini-devel
- Small fix to pre_checkin.sh so krb5-mini.spec is correct.</changelog>
<changelog author="ckornacker@suse.com" date="1389614400">- update to version 1.12
  * Add GSSAPI extensions for constructing MIC tokens using IOV lists
  * Add a FAST OTP preauthentication module for the KDC which uses
    RADIUS to validate OTP token values.
  * The AES-based encryption types will use AES-NI instructions
    when possible for improved performance.
- revert dependency on libcom_err-mini-devel since it's not yet
  available
- update and rebase patches
  * krb5-1.10-buildconf.patch -&gt; krb5-1.12-buildconf.patch
  * krb5-1.11-pam.patch -&gt; krb5-1.12-pam.patch
  * krb5-1.11-selinux-label.patch -&gt; krb5-1.12-selinux-label.patch
  * krb5-1.8-api.patch -&gt; krb5-1.12-api.patch
  * krb5-1.9-ksu-path.patch -&gt; krb5-1.12-ksu-path.patch
  * krb5-1.9-debuginfo.patch
  * krb5-1.9-kprop-mktemp.patch
  * krb5-kvno-230379.patch
- added upstream patches
  - Fix krb5_copy_context
  * krb5-1.12-copy_context.patch
  - Mark AESNI files as not needing executable stacks
  * krb5-1.12-enable-NX.patch
  * krb5-1.12-pic-aes-ni.patch
  - Fix memory leak in SPNEGO initiator
  * krb5-master-gss_oid_leak.patch
  - Fix SPNEGO one-hop interop against old IIS
  * krb5-master-ignore-empty-unnecessary-final-token.patch
  - Fix GSS krb5 acceptor acquire_cred error handling
  * krb5-master-keytab_close.patch
  - Avoid malloc(0) in SPNEGO get_input_token
  * krb5-master-no-malloc0.patch
  - Test SPNEGO error message in t_s4u.py
  * krb5-master-spnego_error_messages.patch</changelog>
<changelog author="ckornacker@suse.com" date="1390305600">- update to version 1.12.1
  * Make KDC log service principal names more consistently during
    some error conditions, instead of "&lt;unknown server&gt;"
  * Fix several bugs related to building AES-NI support on less
    common configurations
  * Fix several bugs related to keyring credential caches
- upstream obsoletes:
  krb5-1.12-copy_context.patch
  krb5-1.12-enable-NX.patch
  krb5-1.12-pic-aes-ni.patch
  krb5-master-no-malloc0.patch
  krb5-master-ignore-empty-unnecessary-final-token.patch
  krb5-master-gss_oid_leak.patch
  krb5-master-keytab_close.patch
  krb5-master-spnego_error_messages.patch
- Fix Get time offsets for all keyring ccaches
  krb5-master-keyring-kdcsync.patch (RT#7820)</changelog>
<changelog author="ckornacker@suse.com" date="1392724800">- don't deliver SysV init files to systemd distributions</changelog>
<changelog author="ckornacker@suse.com" date="1402056000">- obsolete krb5-plugin-preauth-pkinit-nss (bnc#881674)
  similar functionality is provided by krb5-plugin-preauth-pkinit</changelog>
<changelog author="ckornacker@suse.com" date="1404993600">- denial of service flaws when handling RFC 1964 tokens (bnc#886016)
  krb5-1.12-CVE-2014-4341-CVE-2014-4342.patch
- start krb5kdc after slapd (bnc#886102)</changelog>
<changelog author="ckornacker@suse.com" date="1406548800">- Fix double-free in SPNEGO [CVE-2014-4343] (bnc#888697)
  krb5-1.12-CVE-2014-4343-Fix-double-free-in-SPNEGO.patch
  Fix null deref in SPNEGO acceptor [CVE-2014-4344]
  krb5-1.12-CVE-2014-4344-Fix-null-deref-in-SPNEGO-acceptor.patch</changelog>
<changelog author="ckornacker@suse.com" date="1407499200">- buffer overrun in kadmind with LDAP backend
  CVE-2014-4345 (bnc#891082)
  krb5-1.12-CVE-2014-4345-buffer-overrun-in-kadmind-with-LDAP-backend.patch</changelog>
<changelog author="varkoly@suse.com" date="1411473600">- bnc#897874 CVE-2014-5351: krb5: current keys returned when randomizing the keys for a service principal
- added patches:
  * bnc#897874-CVE-2014-5351.diff</changelog>
<changelog author="ddiss@suse.com" date="1411646400">- Work around replay cache creation race; (bnc#898439).
  krb5-1.13-work-around-replay-cache-creation-race.patch</changelog>
<changelog author="varkoly@suse.com" date="1420632000">- bnc#912002 VUL-0: CVE-2014-5352 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- added patches:
  * bnc#912002.diff</changelog>
<changelog author="varkoly@suse.com" date="1426075200">- bnc#910457: CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name
- bnc#910458: CVE-2014-5354: NULL pointer dereference when using keyless entries
  patches:
  krb5-1.12.2-CVE-2014-5353.patch
  krb5-1.12.2-CVE-2014-5354.patch</changelog>
<changelog author="varkoly@suse.com" date="1426075201">- bnc#918595 VUL-0: CVE-2014-5355: krb5: denial of service in krb5_read_message
  patches:
  0001-Fix-krb5_read_message-handling-CVE-2014-5355.patch</changelog>
<changelog author="varkoly@suse.com" date="1436788800">- bnc#928978 - (CVE-2015-2694) VUL-0: CVE-2015-2694: krb5: issues
  in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
  patches:
  0001-Prevent-requires_preauth-bypass-CVE-2015-2694.patch</changelog>
<changelog author="hguo@suse.com" date="1446033600">- Make kadmin.local man page available without having to install krb5-client. bsc#948011
- Apply patch 0100-Fix-build_principal-memory-bug-CVE-2015-2697.patch
  to fix build_principal memory bug [CVE-2015-2697] bsc#952190
- Apply patch 0101-Fix-IAKERB-context-aliasing-bugs-CVE-2015-2696.patch
  to fix IAKERB context aliasing bugs [CVE-2015-2696] bsc#952189
- Apply patch 0102-Fix-SPNEGO-context-aliasing-bugs-CVE-2015-2695.patch
  to fix SPNEGO context aliasing bugs [CVE-2015-2695] bsc#952188
- Fix patch content of bnc#912002.diff that was missing a diff header.</changelog>

</package>
<package pkgid="11dbfb975c4302e8a92fe16de42f7e89af112b08c17c829481a96908e7648ba4" name="libada48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="33ec782e09ec9c82c394e28ce07922551af58190ac57aec42316c1223d957f33" name="libada48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="e3627466c3c9d9499e7ce8c23e0072954fb48d5164777d8ec0d10c5944bb7d20" name="libada48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="29c6ec4e76aef2f0bbcb80c2eea875442d69c54cb065cf11e207936a5252b865" name="libada48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="ee9b3fcfe5865460db00bcb093ced8507f2b84d6a06af0656e0b9b111a3906f2" name="libasan0" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="3666ef5d6166e35c2fc2d60524be7da7e66f2124c22cd0a13e0d1ee6bf708a30" name="libasan0-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="6dc14bf1f961615423412d2e22166902ec86f33ee904be707f3dc47a05e95ef1" name="libasan0-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c23fa5a1f0e29313ea6bfa7917149c9910821614e48a6127481b0e1c380e1383" name="libasan0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="29aded8d70d5c5712cbe29c7e124954804d21cfb9354b16a95ef5c057b00fe11" name="libatomic1-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="649d3c493eb710d5015a60cc25a7df778073a48a769dd60d21131c9a30b3422c" name="libatomic1-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="e2f62de2d25e4f5b53228eea2aad20fde1f482b17abfdb6bd4672535222e0215" name="libatomic1-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="99aaf7a29a9d63b87c797bc13c77ed445f71259a3ed0f58947cb50273007e602" name="libatomic1-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="92ebebf2407f2e7098929f7c0c8196c4689149c224f6acf48657cd854235074b" name="libaudiofile1" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="a660b3ef863a48e19706454cad119f76a0bd44f6d602c12625adc7da962ca87b" name="libaudiofile1-32bit" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="e75151d15d9199841ed0632a033f75606a80b650f0a6ed26ac5602270d86f6a9" name="libaudiofile1-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="f34289d94b5376c9a8fc841d05e666f5d641f3b9df44ee245589a8bbee2da8ed" name="libaudiofile1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="9.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
<changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="77f4b8d43cf4db8854ba0df7dfd9633eab218eba603226cbc740ba2f47b38a66" name="libavahi-client3" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="37adb3ebe0a3d633dc7493a6cda907a7fd752c02849cbef7f473f47aad10659d" name="libavahi-client3-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="bc481da442a34d86c47ec76eb0edb70c6a8517fae97159aa52b55f9954160711" name="libavahi-client3-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="4acd61afd72fb70aa5dc1d5a01baa669d3b8a5174453fb7e5392fe386015f4d5" name="libavahi-client3-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="648c157416b840d9135419a295ab7c759e9333d260fe05a28c75391c8365bce9" name="libavahi-common3" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="7be1caa236306f953a9359db4c8f7d2775f8761a7d5cc975cbf0df61d95845ea" name="libavahi-common3-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="acb5fc8c264922a70974dec73274a7ab24c263cae44d0d2909b006117dfc1f4f" name="libavahi-common3-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="6f764d90041102424e06bbe368b2a60fb846c30f744e9e45939ba8b6c70480db" name="libavahi-common3-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="8303fc5511d2a60786909bb137421fd0b8a7b7c0f3437247a3402f8b2ef8c6e2" name="libavahi-core7" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="600d70d3597779d33510eff1ff708aac8f43289410638b09b87d106d0bec7126" name="libavahi-core7-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="959e522c02c093b9b6215c97ef0e5556c9a438ae5cabae2b6888cdd9d39de0df" name="libavahi-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="a17ef4f23de7b4f89782fffd429de21b14e3ade3f83616bc568001d58f9dea70" name="libavahi-glib-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="8a0dab6815b25fa7aa6ce7c6274519aba5caa4f7f48c503724285d56031f2f9a" name="libavahi-glib1" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="0849db1f245ab04119d4b082cdbb7f8f0d89c65ecd336f53fea140ea0d1915b3" name="libavahi-glib1-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="73396b0e64c9d1f295101596dcdf52f22a09399622d3de681945e58026ccf85b" name="libavahi-glib1-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="5259218f65c5e58b63b8c503badc78fb0863e8b26f5b67c1f14c47f4c110974b" name="libavahi-glib1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="182bcdc79a7999a096135d9d320d4f4bdf9f01bd513e14c32bf0ff511a9d09e0" name="libavahi-gobject-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="1490ebf2d9d3cc5bbb0b9b203e5c688201947ad79a476a7ec5232c1fd464af2f" name="libavahi-gobject0" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="eece0885753951fad978a4ddf414f128465dcdefdde538ae0432db3e45551412" name="libavahi-gobject0-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="8860386111a3c4602fed22a3a3a7e9e39b424c748151a7c434e181835914e139" name="libavahi-qt4-1" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="ae00f4b1898e0569e0a350a44278bcb77895c9a98f30418f43d03d73df83dd40" name="libavahi-qt4-1-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="a82e35d00bab93a5716f9c4977022789f9290c668a7b9d68fb284b01d89c2c32" name="libavahi-qt4-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="84275a589122661b864da7db8cc1694319ba162a2181ed0e69a5898086fa34bd" name="libavahi-ui-gtk3-0" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="9065c8029237483d7447aca4bd303c93c2d37f480c6522b4a082333c175e9409" name="libavahi-ui-gtk3-0-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="bd4581f37ee279ae80ed878ebe538308f3979bfddccee4f127dbecbbe4de746a" name="libavahi-ui0" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="a0a6c52360a2727944fbf1bfe9e49acdd22aa37d55992a13feba86a7214521cb" name="libavahi-ui0-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="475a3d55c499117f0e3f7431d3e64f7bca545ffa19f1a358966d435776754df3" name="libblkid-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="9cfb9b4b6275537e036f5b7de88834c586be0ffe29738d73da741b738862b52b" name="libblkid-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="d05f339e9ed299a890f4428fd57f023d71ff05e01e38552b15a6c5353b2d1c6d" name="libblkid1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="5999b89f1b55bfdc3aca1195948b8a2152c369c6a5877a790a2104b4550a9ef4" name="libblkid1-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="d6c18ff9b687622832d2c64d39218fa9d2f3d7f4dc09ec0ac93d63e5e60a07cf" name="libblkid1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="f4e1943270df4c7aa3a7955063599bc6905ddbd26853835fdcd4eebe3b9366ea" name="libblkid1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="806a720444d0a960865253179d8e81d1afbaeb36b38706d9d60237ade91ecd44" name="libcrypto36" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="3838b3f3fe16edfd609e1e30b2333ea68d579fd721dbf133b7ed6ff87b77bc63" name="libcrypto36-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="3bd632d59d4685807e0f9878628f7e3e250c196dc93bf2574c56c915bbbf9358" name="libcrypto36-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="96fb520abc6657c732d7a8961743dbbdbbfe2bd445980b0a37b6cb6bd983ede1" name="libcrypto36-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="4bd276e972df6c526a5fe840f6055035edaedced85ccddeccbe9b497325f0084" name="libdcerpc-atsvc-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="90b6e9670d96da818191318d476c1ad8fd23271c124138c461f4a47e7be08d88" name="libdcerpc-atsvc0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4d23c05b5ff0b5aea6ae0304ab622d47685f8e18807b52ca6b484259ef7a02ad" name="libdcerpc-atsvc0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="40e18bdb392b72389f23edbcf7b35363650f0803ec855579c24ebfe2203d5d3b" name="libdcerpc-atsvc0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="d57bfcdfbd22e3f3283b19f33cf158b2968c3732f4ba1636f227158c451c6af2" name="libdcerpc-atsvc0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="736d6533d7fe0990b5aacab37a8be005eafc08c9c63d167bd4be44e09fe3ffc0" name="libdcerpc-binding0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="691f1f64824c963f45a6f60a7307915046e99c356c30ad5bd6fd4fcc49dcbe43" name="libdcerpc-binding0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4a828990157ec021f7a5097c25bfef3c1aa7ec84f1e0929acae69871e15edf69" name="libdcerpc-binding0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="2344154b7f44626b90ceb0bbf8408682122248dc033f5f37350172054c63ae04" name="libdcerpc-binding0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="11c7dd44d80d69e9cf596506530ec7f903e567eb1488dfd683d5a2e0fb4a4063" name="libdcerpc-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="57b4e4289233945fa0ffbf4b80e92b2ec8df008fe05eca2d026e3de21c6e25b9" name="libdcerpc-samr-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="c5ae0651e118c28b71150ee038b7a67896ed8ed241c4be29f3511a3bc70022ef" name="libdcerpc-samr0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="6dceebbc2619715381410967bf5d5e4f270215adaedc945748205099863e7886" name="libdcerpc-samr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="a7bcdc5ad672c4387cba4f2416eee794b265e0b759b589b4739642b48a329a89" name="libdcerpc-samr0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="ca0545d228cb1e3a33b9ce96576590c6ecc4c56d851f2b51270636c9cf1ec2e7" name="libdcerpc-samr0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="3b18c26beda664ac222eba3e1e93cc3e778d204a253780b5405c5e8d12ed6e3d" name="libdcerpc0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="6f8664bd50279d794bd0b6106dc55cc97565bf5326a077a9312cf2101b6f2b30" name="libdcerpc0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="b6e345198c48d68f341612f61cbecc7a9734ddf9e171439bc76c8982b0b86889" name="libdcerpc0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="8400021dee0337c53facfb4d40036d1181bc303b8be0055e35a03b3380b3102b" name="libdcerpc0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="f1d2379ac884e089b7473e30e34657629ea6a0b0080803e7cf90373699dd3d4d" name="libdns_sd" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="202b3805dd96ceedc37d247bdf690bdaab9b179dfa96b3f34f55fea358fd3e97" name="libdns_sd-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="427325cac645862ec9195277e1682556187cf64d848c53e78f0570fc6604d4f1" name="libdns_sd-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="cbb2b907e15d048ec0e4d566cf15d717ead605196f5ecd40e4708d88d0d1208d" name="libdns_sd-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="78353990806ecba79d05300ceafcf3fed0b2fc29b792befeafb9d802d4970489" name="libffi4-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="80e3225d9b0193c90290e348a3a656b72e7613d58e75d01f33d22b1e12fad880" name="libffi4-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="4289a6023d09669458350e281129df58499b1b1f2bd60b6965fa3592dfb3a88f" name="libffi4-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f77aa01cd286b671ac72d2a07d66e423ced89c6e7efc0cbec02d343ab030144d" name="libffi4-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f575c398059e8785ad34845c71b95f699272bc9f7cf63d691c170c33b6a068fc" name="libffi48" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="e70b9d2284d5be6947bcbbbba3f3328818fe3e344ad5d4e10cfe802faf67c3f3" name="libffi48-debugsource" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="76a342ebc412a5bebe7366487a7a3bb2cc910dcd0871438e7ea40869dbfcdfe1" name="libffi48-devel" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="7fd265f8971c43d9d2940ead5cf497ab5b865f1a832116b514e969d8ec3f1865" name="libffi48-devel-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="afb61c530da65594ea35b59d0a155dea7b71ad620dc1e9613e08af0ba1b8b7cf" name="libfreebl3" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="506a79d5940e53e6c5f1a31614ffafbe61b85fc2718e754800d23ed24dea4807" name="libfreebl3-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="c0ac00cdaa4fd59aa61fb16485d9029a8579a0d50e8bd72502c0b5b6226be799" name="libfreebl3-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="4772faab63c1ef93b958d88c9891c2bcfbf51329b2f391451c73a645a10c5d6d" name="libfreebl3-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="a67c18ba993e2cc08ea3e9984b03b68ba504d371638bb05f3ff2fc0588ee8290" name="libgcc_s1-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="ef5e485418db8c84a45d37dfc415a0c283c237615bef61876855ff5efbe4e747" name="libgcc_s1-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c95f9611f2a608a5d00136a6df43bf9f5cfa0a264c4876d67d02b125e8dc4eb3" name="libgcc_s1-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="bc2028895c26ba08f577cd026647331bbd3ec777ccacd84d30489f78ea337b9b" name="libgcc_s1-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="66c81e9f63b45e3c811e9feaaf33dc7ef2a16ef6087e71f767a848db96a42928" name="libgcj48" arch="src">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="c0e1a69709a057bc2f367783c1b3c5fd0005389e79146f992b1f696f46c8926f" name="libgcj48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="a9fa7711bb6f5b7e9b9fcf28028abd9d37e81c7b4055b7a114ef66fc39fd1b9b" name="libgcj48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="128c600615f2d4d0467f9653ad98483c644fbb96f57b14e7df27ce845289978b" name="libgcj48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="0c63e106b538130abbc4b5693cb882579bc2fdb34bb7f9794533e27c91daaf6d" name="libgcj48-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="70eadc4bf3bd2cbd5b8031cc77cb71085c1645f7ec03581b0de3f9d362c3a6ee" name="libgcj48-debugsource" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="6437f6fad1bd1a2ddd3f1a7c24828704b6945fc1968a6a725b391cf867ecef33" name="libgcj48-devel" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="2fcfd23fb474cda2d74724086f0e1a7291e0fb24ab5a23f7b91f2804b532e77d" name="libgcj48-devel-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="65692ffc25fc09a3a5b6145f4577c19e65317db4f60bb276dc865fe311fecbe4" name="libgcj48-devel-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="6ea264aec6e1946ebd6934820ee8357a890894cfcec9edc79c8f5d55c0be9949" name="libgcj48-devel-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f3683248aeaa941b966edb8fb2714a2d04aada00a7f96747481c290f24d41816" name="libgcj48-jar" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="deabc4aa2a8112d4a148b27ffd71e93d99f5bcf29e9c28252066090d42d1831f" name="libgcj_bc1-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="208ca33cddd259a6dc074a3c1cbd483ed3da46b6cd319e938e9bb6d74ba97c87" name="libgck-modules-gnome-keyring" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="659e22492230ac8eda56f15d37ba584f64b98d011f96fe2ed99fc7e79c6a2629" name="libgck-modules-gnome-keyring-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="7.1"/>

<changelog author="dimstar@opensuse.org" date="1368446400">- Provide gnome-keyring-32bit (which contains pkcs#11 modules).
  (bnc#819246).</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Introduce %bcond_without gpgagent: allow to disable gpg agent
  during build to easily test issues like bnc#829844.</changelog>
<changelog author="dimstar@opensuse.org" date="1377518400">- Update to version 3.9.90:
  + Fix running gnome-keyring-daemon under test harness.
  + Test fixes (bgo#702367).</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) and dbus(org.gnome.keyring)
  provides (part of bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Minor logic fix (bgo#708483).</changelog>
<changelog author="meissner@suse.com" date="1380369600">- If libp11-kit0-XXbit and gnome-keyring are installed, also
  suggest gnome-keyring-XXbit ... as /etc/pkcs11/modules is for
  both 32bit and 64bit modules (fixes a Wine 32bit issue during
  gnutls init).</changelog>
<changelog author="dimstar@opensuse.org" date="1382011200">- Update to version 3.10.1:
  + Build fix on OpenBSD (bgo#706405).
  + Add manual page.
  + Minor error message fixes.
  + Updated translations.
- Add gtk-doc BuildRequires: needed to build the man page.</changelog>
<changelog author="jdelvare@suse.com" date="1391860800">- Enhance gnome-keyring-check-session.patch: Add "gnome-classic" to
  the list of handled desktop session types (bnc#862775).</changelog>
<changelog author="dimstar@opensuse.org" date="1395057600">- Update to version 3.11.92:
  + Use $XDG_RUNTIME_DIR to create keyring socket directory
    (bgo#725801).
  + Stop exporting the $GNOME_KEYRING_CONTROL env variable
    (bgo#725801).
  + Stop exposing a GNOME_KEYRING_PID variable (bgo#725801).
  + Pass XDG_RUNTIME_DIR to new gnome-keyring-daemon process
    (bgo#726196).
  + Fix issue with changed password not unlocking keyring
    (bgo#726196).
  + Add new --unlock option to prompt for login password
    (bgo#710187).
  + When in foreground mode, close stdout when done initializing.
  + Exit gnome-keyring-daemon when the DBus connection closes
    (bgo#708765).
  + Don't initialize in an idle handler, this is racy.
  + Don't log debug messages to syslog (bgo#711537).
  + Documentation fixes (bgo#711581).
  + License fixes (bgo#721549).
  + Modernize autotools setup and other build fixes.
  + Parallel testing and add new tests.
  + Updated translations.
- Drop gnome-keyring-check-session.patch: no longer required; the
  start of the daemon is controlled by pam (OnlyIf=).
- Rebase gnome-keyring-pam-auth-prompt-password.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 3.12.0:
  + Build and testing fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1410264000">- Update to version 3.13.91:
  + Initialize correctly with empty passwords during login
    (bgo#736085).
  + Don't use geteuid() to get UID for user in PAM module
    (bgo#733418).
  + Fix for libgcrypt 1.6+.
  + Build fixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1411473600">- Update to version 3.14.0:
  + Remove residual GTK+ usage.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
<changelog author="dimstar@opensuse.org" date="1424865600">- Update to version 3.15.90:
  + Fix leaks (bgo#7385080).
  + Refactoring.
  + Build fixes (bgo#740190).
  + Updated translations.
- Remove libgcr-3-1 and libgck-1-0 references from baselibs.conf:
  these libs have been split off back in 2011.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + pam: Make sure to never block SIGCHLD (bgo#745673).
  + Revert "ssh-agent: Fix leak in seach_keys_like_attributes()".
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Disable gpgagent integration, as gnupg 2.1 introduced code to
  explicitly sabotage gnome-keyring.</changelog>
<changelog author="zaitor@opensuse.org" date="1428494400">- Update to version 3.16.0:
  + Fix build issues highlighted by GCC 5.x.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1439380800">- Remove postun handling from baselibs.conf. If one uninstalls
  gnome-keyring-pam-32bit it has the effect that gnome-keyring-pam
  gets unregistered (boo#941736).</changelog>
<changelog author="manfred.h@gmx.net" date="1446465600">- Re-enable gpgagent integration on openSUSE Leap 42.1 which still
  uses gnupg 2.0. Fixes (boo#953100).</changelog>

</package>
<package pkgid="2a917393d4a85f8365fc0f071c47e43a6156a48e22d1879bb59f9170273a30ff" name="libgdm1" arch="x86_64">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="2d7f223050e061b72ef433a946eee83d5010de9e4a4402ea821321dbb0d025ff" name="libgdm1-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="3d7295051392fb50672a970127352c21c5e82f28b56435868ff982b312884c34" name="libgensec-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="822c1165946e1371780cea0747b3dd533ccd67ae2d241ce50861060e10a0ea97" name="libgensec0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="c71cab1853394d9e442945f58afa2a04212844b4e3fe53d1a2414775dbc6e424" name="libgensec0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="ca576206136d305bab0121a0624d2f2671ea44885cdb7694154dd17bf7cdf86b" name="libgensec0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4c77231661dfee7d749e6b964040b7d01c94c7734e7c42653e52ab23f528fccb" name="libgensec0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="74dfcdb6f2bec2038d22bf6d1c3542d252a058612b29c12194cc6af8a2582988" name="libgfortran3-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="a6439935e720900255f275ebb95d1e4ee0b787db7d2d205f3a5d5c2f75268ad6" name="libgfortran3-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="a2cf72b75e3ccfb13455fd73c651da164f389b0a7e6dd49219d27b1af29139bf" name="libgfortran3-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="73ef85fbfdd1ff7c40f23d30fbc568fceb6efaf5da8ff7c34153493a9081c220" name="libgfortran3-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="433694100203916f490c9a4b527500df9503152da085edec7c97cd5b06c7712e" name="libgomp1-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="9a80ca7705813c68c255b6b07b7a02cef35cf010201a051fceb6559dba9cbde7" name="libgomp1-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="701fb689ee69cba97af15e676472b460830edfef83db957f0332b41b5273f9bd" name="libgomp1-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="58bc0d867347656599071179c77d92ef00f1c10c242ca3f779392dd300c126c8" name="libgomp1-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="d3d564faa905530a8a0abaa1c5167b09b063fc003c090e73fec35b32365be5c1" name="libgtk-3-0" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="0d8b9fb9796c6b86a9c2ab6ec7adebfb84aab3b041c958948cdc5a2a2d2f4621" name="libgtk-3-0-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="fe068834d7903afc8f13cc3a1266bae8622442329bba3aadfd45e77f4af4b07b" name="libgtk-3-0-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="2bf2efec3b619ca530839880d19240bb275c2b84b71f01468b0f7dd8701b6026" name="libgtk-3-0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="4ce84ce8d1e6f9a9d80a787853c84f7b9e49512832eff33191fe765551a55c26" name="libhowl0" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="7ba5dc9ffc0d589ca07eae0993e4b6b20c7bb0b5a44ea6d947d51547a8fcb7f0" name="libhowl0-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="d3cdf9e9f899e2724613e78379eea35d4b4b22875f793f97d6d662c80a57b65f" name="libitm1-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="db324da8773fa7791c7620b3c5dad8f04a09dffb3b8f39cd217a2e317b16010e" name="libitm1-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="aaf84bf28000b1380e604c636eb3a59afb08cfb2e4571e7877153830aabb98d1" name="libitm1-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="da409523012abba63c3dd42c0769feb1a8b20a9264a380498f01e3680c714955" name="libitm1-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="74787b97b3b066a031368dfcf39fe738adf2d77c041d8b560b999545650d5de7" name="libmarco-private0" arch="x86_64">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="8b28260e3746d18072ad6acaf9618b9667267f5f5dac04ffe2ceff7649089756" name="libmarco-private0-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="e8d9297f3b61e70083185769bd61085287d34c9565c738c813a5f088d10e78bf" name="libmount-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="c1d82d08e7e918a77fce68dc4db76cc0f6c7ac68fa4e24a079e2778b68b52332" name="libmount-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="9c6777b3d6fe7cfd6d7263c634d22a8299e8e5aebaaa378b2ee7e64fa2b1c2a9" name="libmount1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="854f421ecd6929ac8dc1ed9f44134456fcd0044ee0c027651067e8e0c3cfed54" name="libmount1-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="9dd0fdea78c30aa1f111a3beb266c8b8154097e0cce38ae9628a2aaa04db166d" name="libmount1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="267f23b1b51b45b5db5972f044daa88454bf6156fd4246d28198232bd6d452af" name="libmount1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="d29abe9fe659e208150f172c232faa43f09711594e98a5a2085277ec9b8b4f25" name="libndr-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="10a59d5a94e4c8a1d15da86d31522dd8517a7d14ae1a5d6d956cd6875a46e4cf" name="libndr-krb5pac-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="74aa569a9336eb4f44ad9bc43feac4bd745e6ff8d8110c21bbc037285d18d572" name="libndr-krb5pac0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="90643877533dfd1c45a8925ee586342eb872d4219a204da3268b51a4e84eae2c" name="libndr-krb5pac0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="cccabd0b6354185ba8022f763e52c8c43d65e8c3eaf50bfe378fb5f6e20878b1" name="libndr-krb5pac0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="5216b9956daa714c94d559d229c42c5b101246025ab60267b8dc8c571c207124" name="libndr-krb5pac0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="7b1b69a372b18a883c3a13eec73166491c779879162fdc2ff055aac556d81287" name="libndr-nbt-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="09d4195dfef2aa790b19f6d8d97e340aed09ed7cbfe530c9549c69a82a290b88" name="libndr-nbt0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="52cbde0b8a3b0a35412288435f048706cf2de3290a8e0e2d70b9ec4c5f196271" name="libndr-nbt0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="14f7e8ce98b83fe753f02a3679d24dd8657be8f28488c74a3fd5136fbab3f025" name="libndr-nbt0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="f31e791e59ab1024ee23a65fb85f566dd57872882239db6cc1cafe7401385818" name="libndr-nbt0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="bd79f7a9b4e9ea26471f51a9641eea1de84500b8365dc048caf72fd71a8f2432" name="libndr-standard-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="6bcfb3e25a3505fd10cfef3bfeb05a6565f143fadfabd652a023360750696e9a" name="libndr-standard0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="f61cb195be3b7224f8963e4c956acb04d39001a0dd3c439193b35d2b1b85972d" name="libndr-standard0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="fb570dc85a1b0c7b7db8eba0b75ed7d677224d47f429c3600f18d4bbfc81555e" name="libndr-standard0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="7e57c9ceea88a292dd25d0618b5a85ef2b49c7b3bc6d28e364c597d35e6488df" name="libndr-standard0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="0c4f873be578d4fd6f29a7ccf95591dfba49d4c924a32cc1bc19efd14105e95d" name="libndr0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="46b5d8b7abbf9bebd0e178f72c27a92f2f2cf1445448b7fcbc626d32d918591e" name="libndr0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="054e087e1313dfc87fa25c7193995c1314a8dbf51967b9f5e7002518a2a85e38" name="libndr0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="8c0f0d3bd7378f485455a3f099df4718267e7f238da9a09c650e22cc6877717a" name="libndr0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="8123c2663a9c8f023b42ed6b55fdb577f7323b9b9146d03e770b52b449e3a188" name="libnetapi-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="b7b2426d7c9837245bb367ed396f56cb7b2a4bc6513a901b58686e140f5f23f6" name="libnetapi0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="08da0f71ab9bd937e7752a94e4af9268985166a0fb3b7c842f0d3265fb0ca904" name="libnetapi0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="d6c9d0c0e3470a849f745fb9b0affc8f0aac1f69a3de70cbf82cc3406759c764" name="libnetapi0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="88d10a0eea96b35283e76cb70bfd2c2b2df8c5862eb063938071628b1e999966" name="libnetapi0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="13d5cd365f919aaa35c3c0d2adb96a205cd4c44bb885b66d13b3e7a64541dfdc" name="libobjc4" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="80875e7b08c61e8cba3f085cb4ccfc64a533d44563d0348728f33eafbc421a56" name="libobjc4-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="41ac05b4a859b48ae1e3b663832cf443d5999303c5aa397426c796910f8a8a67" name="libobjc4-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="389843c78c69f92e822822f05683f54f73e74337d514f270a8ceff32a47c6c03" name="libobjc4-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="344435c034e01ea6392dac8f19e9238544dd172e9c7c07a3e8daa8601c6ff7cd" name="libpolkit0" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="c919d3fdbb7db8ebe8bdc2313dfd336ca9179ee103106e16cddb6b265affb1f2" name="libpolkit0-32bit" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="9a5b161d8b20a09d3c8316bc759d9f4681fe22ed1a66a4310b63123f82cc645c" name="libpolkit0-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="a5cec6b8cab6091b608dbf8c016aa82426424822215a6ae16714888d96b854cd" name="libpolkit0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="65d3f35dd36efbdfe25490b4ead58f82de95490c5c2350c80fda6a9e9f6ccb03" name="libpotrace0" arch="x86_64">
    <version epoch="0" ver="1.13" rel="5.1"/>

<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>

</package>
<package pkgid="792ba633b52f9b3cccfc9016f88485c7f82204edfafdb32f88333153abd9e326" name="libpotrace0-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.13" rel="5.1"/>

<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>

</package>
<package pkgid="a9db44562c47cbfb92c2783769581ac2102ab3876ba0df65dd059edabcd8af15" name="libquadmath0-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f8d17ca996ed4966861ce64ac9d21914210aa40b35df1320038d3dd2f2ec83a8" name="libquadmath0-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="733be330b2fdaa966f713b6ba2aaa55e513236c16edce70a35e776c81afdfe1b" name="libquadmath0-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="d293256d8dffe235daee6095615629ec37238369ce43b7966e7940a71e1843d5" name="libquadmath0-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="abc5638d10fe45c4e76c405f728de49f40be990b0ecbb58fcde7910bbbb0f8ad" name="libregistry-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="1237e30518e6820ee6485a2e601bd9c5e5862de607746d1abf81c96829a07ec1" name="libregistry0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="7f4f60a0b108c1a4dff24b4512de1c03dc6cb9adfcfaa4ad735de50f304cd571" name="libregistry0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="ec4013f9d3a5a27798a640b54a97a9b81c95a172f72cd93d50069f84ddaffff5" name="libregistry0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="ff2422d6e1571740f9f6e5d2884dcf09fc2d16d790b4648b18db4d262c05f23f" name="libregistry0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="93737faf727b397e8f0bb893213b8a9031642cbded2a4d77ccf5c702f057679e" name="libressl" arch="src">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="42162a7d835b6eb0fa6987689d101f508220714a25d10dc5e98fa82cf95428fa" name="libressl" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="f54c9d6294e91440dfda20d9c8170a881eb5d2ff3194cdc1b8750638aa50bf3c" name="libressl-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="7a4550967b9863eebd162d5c4356215fc5fa43c9863109536fc0ce58907f0d3f" name="libressl-debugsource" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="676e7a8fdd6910192a28f43d195dfe71a7cc660682c68d5a5c5566417b576846" name="libressl-devel" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="9b8062a28731aedb23a489cf6e372c40c72c35c197fda4150014223b61e10bc9" name="libressl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="90b922bb4fa74ab0a159f2951d40642fc8876f8ff0acd72e8b48285c27b68d5e" name="libressl-devel-doc" arch="noarch">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="a0a8d0b8f26174e25ee7753ff3d2ae0edef0efc03b821edbe5687bfbe4114f59" name="libsamba-credentials-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="33c943f7d0f63b84de1a5ee02bb7bd9bafab3352dabee96265cf90ac014e05a7" name="libsamba-credentials0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="0aac9adeb0228ac9eb97e2da70532e1b6c0e25f40bb206dc9a530eb093db3daf" name="libsamba-credentials0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="d9e0398b89e05bc46a6daba2e5bbae0ac32b08c71ffe3b5b2261b6b6077d66ea" name="libsamba-credentials0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="961962b5f5d428fb3a2997cd0d9acab8257ee67bbb5b7ccfa13372cb9909f67e" name="libsamba-credentials0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="6342191789c8390591c5b377594d273e1994d11d67884c2afa77ec41e5997c80" name="libsamba-hostconfig-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="9dd51d2237d4f2ac6dc4285fa413493af90869dcbd12a62348c05a27571d4994" name="libsamba-hostconfig0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="2b99e81eea4e4ae2a6c82a9afe22ff58bb64e9ca59716e85e5201c24b0a41bbb" name="libsamba-hostconfig0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="348323856f6ee908c4e195f04dfde05314b953ddbdaa6cd7b1a980da024e034e" name="libsamba-hostconfig0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="0c70bc137a5956bcffea029030fe1bbbac82632d4df6e365894c2e8657308191" name="libsamba-hostconfig0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="e1ddc71684f95bb8907fc9119dbde943d639ca23cbc862689bfe19ac3868707f" name="libsamba-passdb-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4c05ffb8993b1ae591b5e720d0627dd44419d4990fafe15e6450ee5bbd61627c" name="libsamba-passdb0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4c567c356cbb72928b01c3e565ea84c900a30749dd428937c543dc24df4cd821" name="libsamba-passdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="8f196d9929648511872b0727b3d492718cec077728bb78f83a9fce5a8b5c4db8" name="libsamba-passdb0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="567f953250dd569b5571a85c2896284b9b0ba9a4a4d2f811178f0c4a57bd8806" name="libsamba-passdb0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="fa51e7d399906e7be68c259f560a6fdbda72d27ec2f01317ba2a3c5cd4f7193f" name="libsamba-policy-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="7208b6c63df913ccda63047dacd7e4a13dab57269ff21ca566f44721f7188ed6" name="libsamba-policy0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="88f28b23896ff1aecdcf87c6a89b382db941a7d46c12e7018f61adbe5fc2a24f" name="libsamba-policy0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="c2c9808d64eaa8bb4e720731f0e469c5e7a2c8196e4a90bd3dbe08c464a321f5" name="libsamba-policy0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="0e683931c9ef75baa22bd11e42aea79a39c3244533f5349a07bac267da875189" name="libsamba-policy0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="80ab091aeb5d644b81c25e82859e369336f21e5b9a1d14ecf6dec8f6f79590b6" name="libsamba-util-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="7382fd64a22a90a044bf48d787e886da1281805b501919aca90365d8808f02b4" name="libsamba-util0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="1cf720297947db7530e13f10b3c598036e7683ab639676b9a35c6dfd59d8c774" name="libsamba-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="e52640f35c039b59a7c586c520af2c02ddf54e19938a95faafd542cf674ae258" name="libsamba-util0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="00660d6abe1583b9693615fcd8a542f8035a182751d4d0e93fc819495d555a28" name="libsamba-util0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="169f0228270bbc19333e76ad95356bc476706914fc2b47b069433052c5f25831" name="libsamdb-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="9fe95191627f885cbe1a74d067ae598839365bb8d6fc8a0acaba6d0ed427ad2f" name="libsamdb0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="393c3bd1d8f97f9d4fe278e7de23fb3663961e1987c13e9244ab14298d81b57a" name="libsamdb0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4d24500bf8fc14974af757c6f8ed54952e3ff7d0a7f237395fcf982a51ff04de" name="libsamdb0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="3499e731dde842f3aaece37da6612164b713a22894f1b2859de56af289962b01" name="libsamdb0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="31e2c5ac8dbbcf3d50d41b06b7f83137a8638832df619196ccf4516cc528b08d" name="libsmartcols-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="5895078aea80019ee9b751440cb21cf8632c0ce618d359a9a46dfbfed9f949a7" name="libsmartcols1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="fadb2d5328973c26a1e6d53aa602f0fbcc4b510f4bf194808606ebb36df02316" name="libsmartcols1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="b19d27f90376836fbdb3579493a69904af8fe1c6289dd129fb88ee15a22e2749" name="libsmbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="69839a3ebf8556219dfe482a36642b69327ebb34299e7568d8289ee6cf09ead6" name="libsmbclient-raw-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="df1ddfe8ed1bfdce5962ee127b2398ef32a10b69544ae24c90ac8ab2b464fe82" name="libsmbclient-raw0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="0a9ae9c012e915ad790d79b5667b7fa465b5a887615e57d58d6fb64e61467b7e" name="libsmbclient-raw0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="d606c128b84cf922a88a912ad5baf2dcbde2ffa37407e4797032e53efc295b7c" name="libsmbclient-raw0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="f0793a521aab9f6eb17f22c12a154aded7792aa754a68b81c72fe592223329a7" name="libsmbclient-raw0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="83ff9138a4b2c7794e2764872e32877bca1988f3c9443f1418519dab2ccd4799" name="libsmbclient0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4d9c0ec83f28c0b11eeb3f7bf0d02eeb5d47be1da72ed639e8d341d0295b4fb7" name="libsmbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="51322b9eb322458f767bc36d6767ba623c84dc09c94e222a91e6e65e065fc602" name="libsmbclient0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="412157f09781cdb0b1e2ba84d20a830e4677145117ccbf61c543ce7a245692d2" name="libsmbclient0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="125519f8ae1a12d84892ab2267eca5e471ab4fe70859e345d606a4f4b64824bb" name="libsmbconf-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="47c85e22ae68b2ebdddba3081376de0337c0d12a5475ca64c8589e9c6faff861" name="libsmbconf0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="e2ab51e44de9de76b5c09f98971e3b31c4f054d1b02d10ff485ebb4b60254b45" name="libsmbconf0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="9a603337ec6bf7745afbd015e72406b7f430f5f9cad83d601594835fe81a57e7" name="libsmbconf0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="8ecbfe833798ea9e3d08c2f601fbabf703b77d88debac8a3ee613d735edb8df6" name="libsmbconf0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="f4fb9e3df5a16d17dd887087dfe38ea1e743a5b2f2f4ba808211c62fa84cf504" name="libsmbldap-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="7c0dc1ae9d0c31ccfb2e2b8bb2f3387cd5b79fe8e21f635d55845ed4d9733ead" name="libsmbldap0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="84f39416edba3dfe5b04ae365ecdc95ff91b5c8c0043101aff20c2ee97b5e814" name="libsmbldap0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="991438996e92eb2c33b2433a10e3d8c251e749574b485c10684d916fa2d527e2" name="libsmbldap0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="c3bda87a2025d09f334a0d205bc94e4ce1a192a3fb8c59e6ccf382e2d59897c0" name="libsmbldap0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="6a885b6c91295144e58b8bcc3ce4bd7fe96e9b0180aa1ba0d82ea7cc1ed0abe6" name="libsoftokn3" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="08127a469bc9da1f5fd5f2f83d173ca37a961711bd835153998ee11aa99c7b61" name="libsoftokn3-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="8d1927f5450c4216a40824456b48dee282ec05b762689961cf3e75e84e903748" name="libsoftokn3-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="adabec0184f20828de0db7ef84f17dace101a7c8793d1ba32acfeeeefe01b6dc" name="libsoftokn3-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="9f63f7c27961acf69aec015066203971fd72905a1bb6bc19970589fafc30c9ae" name="libssl37" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="8a04144eab21bd25902383c85378e4b24cfc0069f47f2d1ffcf4bcb8d9443e97" name="libssl37-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="5a26d194bbb5a936ebd7897da5196e5549bc9528a02da897bcf26e08661cb790" name="libssl37-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="d09c325cb128c536a8793b6125dd1b9718f8d874f9ca23a730ebf21859d60a41" name="libssl37-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="572bd5e0da3c9594ac26a1b1b4c45b831f1c5fcbafb8c7898d7f3a1dd503512d" name="libstdc++48-devel" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="2c42e6416e8de3f668cd13bdf81ed406da8cbebc3a2fa78d9e2995618412dd12" name="libstdc++48-devel-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="d80da953ea7c84bf5f2c235e341e2a53fd04d20c08e92781564623aed8ba9367" name="libstdc++48-doc" arch="noarch">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="82442a59589b50960fd20b8de31d235074bf4a52e6df102be7485e9d922b9afc" name="libstdc++6-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="e8d894283687612ce407211f4e19705275b322f199ed642648e511f0f25c00cd" name="libstdc++6-gcc48-32bit" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="6aed0eb3bcc23ecb83a236806fae9fc3ebbbf9f58d2159789e3eac685dc0d380" name="libstdc++6-gcc48-32bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="d1c748e85de524ac0495e565cfca0129ad017b3bb62f481fbe8b83ea2bcd3a29" name="libstdc++6-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="efcadb2f0309cec968d4c519eb91f6c7e6cc27e9c1f939e69657d6bef35c511e" name="libstdc++6-gcc48-locale" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="6baa15f0bab7fd2b1b14e1e06454e73b6a010bc0994de0f3268e73d46bf242e2" name="libtevent-util-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="98d355d4e38a704354d7c9e1cfd6a9194ae14ebcd05ebfc8802d601621876c64" name="libtevent-util0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="b58d5ec05aac8120829fc6643746dfc8ceb47a1a28bfcb3a7ba37850ed094e38" name="libtevent-util0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="65b35d695c32b03ccaebb2456b7663bbd2576142c0bf44650c98ee1a4ee3a942" name="libtevent-util0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="9308d2231bfb3d6e9b1f770a60a75af3511213decd83b914c63067328b9d6c23" name="libtevent-util0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="be75bad106ef69362f6f072af97e3d4a4f9bc542ec3455505a947417764611f4" name="libtls9" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="ef03711c3c0dd8cb8446a7593ec11c2eeedee4ae6a018b6e6f51f3253504499f" name="libtls9-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="796ae1359f578a625cfc75de4a0e18942df546ff8b591b9b5ddd307598448496" name="libtls9-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="16c54c9c8de365a9c59b045b3cc9e5ec62df329ac61a9484f851275440d486f9" name="libtls9-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.3.0" rel="3.1"/>

<changelog author="jengelh@inai.de" date="1405252800">- Update to new upstream release 2.0.1
  * This release includes a number of portability fixes based on
  the initial feedback received. A few hardcoded compiler options
  that were problematic on some systems as well as -Werror have
  been removed. This release also includes pkg-config support.
- Remove libressl-rt.diff (solved differently upstream)</changelog>
<changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 2.0.2
  * This release addresses the Linux forking and pid wrap issue
  reported recently.
- Add libressl-auxval.diff (fix compile error),
  libressl-asn1test.diff (fix testsuite failure)</changelog>
<changelog author="jengelh@inai.de" date="1406030400">- Update to new upstream release 2.0.3
  * This release includes a number of portability fixes, and also
  includes some improvements to the fork detection support.
- Remove libressl-auxdal.diff, libressl-asn1test.diff
  (solved upstream)</changelog>
<changelog author="jengelh@inai.de" date="1407326400">- Update to new upstream release 2.0.4
  * This version includes more portability changes, as well as other
  work. most noticable may be the deletion of the of the SRP code
  (which has not been enabled in any LibreSSL release).
- Remove pkg-config files so "pkgconfig(libcrypto)" remains
  unambiguous in the distro</changelog>
<changelog author="jengelh@inai.de" date="1407585600">- Update to new upstream release 2.0.5
  * This version forward-ports security fixes from OpenSSL 1.0.1i:
  CVE-2014-3506, CVE-2014-3507, CVE-2014-3508 (partially
  vulnerable), CVE-2014-3509, CVE-2014-3510, CVE-2014-3511.
  (LibreSSL was found not to be vulnerable to
  CVE-2014-3502, CVE-2014-3512, CVE-2014-5139)</changelog>
<changelog author="jengelh@inai.de" date="1417608000">- Update to new upstream release 2.1.1
  * Address POODLE attack by disabling SSLv3 by default
  * Fix Eliptical Curve cipher selection bug</changelog>
<changelog author="jengelh@inai.de" date="1418385600">- Update to new upstream release 2.1.2
  * The two cipher suites GOST and Camellia have been reworked or
  reenabled, providing better interoperability with systems around
  the world.
  * The libtls library, a modern and simplified interface for secure
  client and server communications, is now packaged.
  * Assembly acceleration of various algorithms (most importantly
  AES, MD5, SHA1, SHA256, SHA512) are enabled for AMD64.
- Remove libressl-no-punning.diff (file to patch is gone)</changelog>
<changelog author="jengelh@inai.de" date="1422100800">- Update to new upstream release 2.1.3
  * Fixes for various memory leaks in DTLS, including those for
  CVE-2015-0206.
  * Application-Layer Protocol Negotiation (ALPN) support.
  * Simplfied and refactored SSL/DTLS handshake code.
  * SHA256 Camellia cipher suites for TLS 1.2 from RFC 5932.
  * Ensure the stack is marked non-executable for assembly sections.</changelog>
<changelog author="jengelh@inai.de" date="1422446400">- Add package signatures</changelog>
<changelog author="sor.alexei@meowr.ru" date="1425643200">- Update to 2.1.4:
  * Improvements to libtls:
  - a new API for loading CA chains directly from memory instead
    of a file, allowing verification with privilege separation in
    a chroot without direct access to CA certificate files.
  - Ciphers default to TLSv1.2 with AEAD and PFS.
  - Improved error handling and message generation.
  - New APIs and improved documentation.
  * Add X509_STORE_load_mem API for loading certificates from memory.
    This facilitates accessing certificates from a chrooted
    environment.
  * New AEAD "MAC alias" allows configuring TLSv1.2 AEAD ciphers by
    using 'TLSv1.2+AEAD' as the cipher selection string.
  * New openssl(1) command 'certhash' replaces the c_rehash script.
  * Server-side support for TLS_FALLBACK_SCSV for compatibility
    with various auditor and vulnerability scanners.
  * Dead and disabled code removal including MD5, Netscape
    workarounds, non-POSIX IO, SCTP, RFC 3779 support,
    "#if 0" sections, and more.
  * The ASN1 macros are expanded to aid readability and
    maintainability.
  * Various NULL pointer asserts removed in favor of letting the
    OS/signal handler catch them.
  * Refactored argument handling in openssl(1) for consistency and
    maintainability.
  * Support for building with OPENSSL_NO_DEPRECATED.
  * Dozens of issues found with the Coverity scanner fixed.
  * Fix a minor information leak that was introduced in t1_lib.c
    r1.71, whereby an additional 28 bytes of .rodata (or .data) is
    provided to the network. In most cases this is a non-issue
    since the memory content is already public.
  * Fixes for the following low-severity issues were integrated
    into LibreSSL from OpenSSL 1.0.1k:
  - CVE-2015-0205 - DH client certificates accepted without
    verification.
  - CVE-2014-3570 - Bignum squaring may produce incorrect results.
  - CVE-2014-8275 - Certificate fingerprints can be modified.
  - CVE-2014-3572 - ECDHE silently downgrades to ECDH [Client].</changelog>
<changelog author="jengelh@inai.de" date="1426766400">- Update to new upstream release 2.1.6
  * Reject server ephemeral DH keys smaller than 1024 bits
  * Fixed CVE-2015-0286 - Segmentation fault in ASN1_TYPE_cmp
  * Fixed CVE-2015-0287 - ASN.1 structure reuse memory corruption
  * Fixed CVE-2015-0289 - PKCS7 NULL pointer dereferences
  * Fixed CVE-2015-0209 - Use After Free following d2i_ECPrivatekey error
  * Fixed CVE-2015-0288 - X509_to_X509_REQ NULL pointer deref</changelog>
<changelog author="jengelh@inai.de" date="1427284800">- Ship pkgconfig files again</changelog>
<changelog author="jengelh@inai.de" date="1434110400">- Update to new upstream release 2.2.0
  * Removal of OPENSSL_issetugid and all library getenv calls.
  Applications can and should no longer rely on environment
  variables for changing library behavior.
  OPENSSL_CONF/SSLEAY_CONF is still supported with the openssl(1)
  command.
  * libtls API and documentation additions
  * fixed:
  * CVE-2015-1788: Malformed ECParameters causes infinite loop
  * CVE-2015-1789: Exploitable out-of-bounds read in X509_cmp_time
  * CVE-2015-1792: CMS verify infinite loop with unknown hash
  function (this code is not enabled by default)
  * already fixed earlier, or not found in LibreSSL:
  * CVE-2015-4000: DHE man-in-the-middle protection (Logjam)
  * CVE-2015-1790: PKCS7 crash with missing EnvelopedContent
  * CVE-2014-8176: Invalid free in DTLS</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Update to new upstream release 2.2.1 [bnc#937891]
  * Protocol parsing conversions to BoringSSL's CRYPTO ByteString
  (CBS) API
  * Added EC_curve_nid2nist and EC_curve_nist2nid from OpenSSL
  * Removed Dynamic Engine support
  * Removed unused and obsolete MDC-2DES cipher
  * Removed workarounds for obsolete SSL implementations
  * Fixes and changes for plaforms other than GNU/Linux</changelog>
<changelog author="jengelh@inai.de" date="1439121600">- Update to new upstream release 2.2.2
  * Incorporated fix for OpenSSL issue #3683
  [malformed private key via command line segfaults openssl]
  * Removed workarounds for TLS client padding bugs, removed
  SSLv3 support from openssl(1), removed IE 6 SSLv3 workarounds,
  removed RSAX engine.
  * Modified tls_write in libtls to allow partial writes, clarified with
  examples in the documentation.
  * Building a program that intentionally uses SSLv3 will result in
  a linker warning.
  * Added TLS_method, TLS_client_method and TLS_server_method as a
  replacement for the SSLv23_*method calls.
  * Switched `openssl dhparam` default from 512 to 2048 bits
  * Fixed `openssl pkeyutl -verify` to exit with a 0 on success
  * Fixed dozens of Coverity issues including dead code, memory leaks,
  logic errors and more.</changelog>
<changelog author="jengelh@inai.de" date="1439812800">- Avoid file conflict with ca-certificates by dropping
  /etc/ssl/certs</changelog>
<changelog author="jengelh@inai.de" date="1439812801">- drop /etc/ssl/cert.pem</changelog>
<changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 2.2.3
  * LibreSSL 2.2.2 incorrectly handles ClientHello messages that do
  not include TLS extensions, resulting in such handshakes being
  aborted. This release corrects the handling of such messages.</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update to new upstream release 2.3.0
  * SSLv3 is now permanently removed from the tree.
  * libtls API: The read/write functions work correctly with external
  event libraries. See the tls_init man page for examples of using
  libtls correctly in asynchronous mode.
  * When using tls_connect_fds, tls_connect_socket or tls_accept_fds,
  libtls no longer implicitly closes the passed in sockets. The
  caller is responsible for closing them in this case.
  * Removed support for DTLS_BAD_VER. Pre-DTLSv1 implementations are
  no longer supported.
  * SHA-0 is removed, which was withdrawn shortly after publication
  20 years ago.</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Security update for libressl:
  * CVE-2015-5333: Memory Leak [boo#950707]
  * CVE-2015-5334: Buffer Overflow [boo#950708]
- adding CVE-2015-5333_CVE-2015-5334.patch</changelog>

</package>
<package pkgid="df3e2391d0426be365b74af78fdb7246babb4d1e5a43e7e3a5dd0259da96111a" name="libtsan0-gcc48" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="f204eb65dcf995295bde771adb6563b73e1431e68e4635c36da49e5fb65d4754" name="libtsan0-gcc48-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.8.5" rel="18.1"/>

<changelog author="rguenther@suse.com" date="1395662400">- Update to gcc-4_8-brach head (r208789).
  * pulls latest fixes</changelog>
<changelog author="rguenther@suse.com" date="1396612800">- gcc48-ibm-power8-bnc871635.diff, fix glibc math testsuite.  [bnc#871635]
- gcc48-lto-plugin-short-readwrite.diff, backport lto-plugin changes
  to work more reliably in virtualized environments.</changelog>
<changelog author="rguenther@suse.com" date="1396872000">- Update to gcc-4_8-brach head (r209122).
  * pulls official backport of ppc64le support
  * drops gcc48-ibm-power8.diff, gcc48-ibm-power8-testsuite.diff,
  gcc48-ibm-power8-other.diff, gcc48-pr59844.diff, gcc48-ibm-power8-fixes1.diff,
  gcc48-ibm-power8-fixes2.diff, gcc48-ibm-power8-disable-sanitizer.diff,
  gcc48-ibm-power8-testsuite-fixes1.diff and gcc48-ibm-power8-fixes3.diff
- tls-no-direct.diff, fix to only affect %ix86 similar to SLE11.  [bnc#185782]
- refresh gcc41-ppc32-retaddr.patch
- Drop old compatibility provide and conflict of/with libgcc%{libgcc_s}</changelog>
<changelog author="rguenther@suse.com" date="1399982400">- Build libstdc++48-doc package from the libgcj48 build and build
  the libstdc++ API reference, build-requiring doxygen and graphviz.
  Add patch gcc48-libstdc++-api-reference.patch to refer to that
  instead of the online version.  [bnc#871501]</changelog>
<changelog author="rguenther@suse.com" date="1400241600">- Update to gcc-4_8-branch head (r210488).
  * pulls GCC 4.8.3 release candidate
  * pulls fix for ppc64le ABI incompatibility with s390 for HTM.
    [bnc#878065]</changelog>
<changelog author="rguenther@suse.com" date="1400760000">- Update to gcc-4_8-branch head (r210846).
  * Includes GCC 4.8.3 release.
  * Fixes ppc64le HTM ttest code generation.  [bnc#879504]
- Fix libstdc++48-doc build conditional to really only build from
  libgcj48.spec.</changelog>
<changelog author="rguenther@suse.com" date="1402574400">- Update to gcc-4_8-branch head (r211485).
  * Fixes ppc64le V1TI memory operation miscompile.  [bnc#882300]
  * Fixes ppc64le miscompile of calls to K&amp;R functions.  [ggo#61300]</changelog>
<changelog author="rguenther@suse.com" date="1403784000">- Add libgcj48-rpmlintrc and libffi48-rpmlintrc as sources.</changelog>
<changelog author="rguenther@suse.com" date="1403870400">- Update to gcc-4_8-branch head (r212056)
  * Fixes ppc64le miscompile with VSX vector extracts.  [bnc#884628]
  * Fixes -march=native behavior when running in QEMU/KVM.  [ggo#61570]
  * Fixes wrong-code on i686 with int to double conversions.  [ggo#61423]
  * Fixes wrong-code on aarch64 for TLS accesses.  [ggo#61545]</changelog>
<changelog author="rguenther@suse.com" date="1405512000">- Add patch gcc48-bnc887141.patch to fix INTERNAL_SYSCALL_NCS miscompile
  in glibc.  [bnc#887141]
- Add patch gcc48-bnc884738.patch to fix kernel atomic_dec_and_test
  miscompile.  [bnc#884738]</changelog>
<changelog author="rguenther@suse.com" date="1406289600">- Add patch gcc48-ppc64le-abi-warnings.diff to warn about future
  ABI changes for ppc64le.  [bnc#888907]</changelog>
<changelog author="rguenther@suse.com" date="1406548800">- Add patch gcc48-ppc64le-abi-warnings-fix.diff to fix failure to
  link any Objective-C/C++ program on ppc64le.  [ggo#61920]</changelog>
<changelog author="rguenther@suse.com" date="1406894400">- Add patch gcc48-libgfortran-CVE-2014-5044.diff to fix
  integer overflows in libgfortran, CVE-2014-5044.  [bnc#888791]</changelog>
<changelog author="matz@suse.com" date="1415016000">- Add patch gcc48-s390x-keep-leaf-when-profiled.diff for
  kgraft.  [bnc #899871]</changelog>
<changelog author="rguenther@suse.com" date="1435060800">- Update to GCC 4.8.5 release.
  * Fixes bogus integer overflow in constant expression.  [bnc#934689]
  * Fixes ICE with atomics on aarch64.  [bnc#930176]
  * Includes fix for -imacros bug.  [bnc#917169]
  * Includes fix for incorrect -Warray-bounds warnings.  [bnc#919274]
  * Includes updated -mhotpatch for s390x.  [bnc#924525]
  * Includes fix for ppc64le issue with doubleword vector extract.
    [bnc#924687]
  * Includes patches to allow building against ISL 0.14.
  * Includes patches gcc48-bnc887141.patch, gcc48-ppc64le-abi-warnings.diff,
  gcc48-ppc64le-abi-warnings-fix.diff and gcc48-libgfortran-CVE-2014-5044.diff.
- Fix build against SLE11 SP4.  [fate#317926]
  * Build without GRAPHITE support where isl and cloog-isl are not
    available.
  * Where mpfr 2.4.0 is not available disable the few features
    requiring it to allow building with mpfr 2.3.2,
    gcc48-remove-mpfr-2.4.0-requirement.patch.
  * Disable Ada build for ppc64.
  * Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11
    again.  [bnc#927993]
- add aarch64-vmlaq-lane-s32.diff
- Add gcc48-bnc889990.patch to backport rework of the memory allocator
  for C++ exceptions used in OOM situations.  [bnc#889990]
- Add patch gcc48-pr66306.patch for reload issue on S390.
- Add patch gcc48-bnc922534.patch to avoid accessing invalid memory
  when passing aggregates by value.  [bnc#922534]</changelog>
<changelog author="rguenther@suse.com" date="1436875200">- Enable 32bit code generation for ppc64le but do not build 32bit
  target libraries.  Fixes ppc64le kernel compile.</changelog>
<changelog author="dmueller@suse.com" date="1443441600">- add gcc48-aarch64-pr60010.patch,
  gcc48-aarch64-pr61997.patch [bsc#947772]</changelog>
<changelog author="rguenther@suse.com" date="1443528000">- Add gcc48-bnc947791.patch to fix no_instrument_function attribute
  handling on PPC64 with -mprofile-kernel. [bsc#947791]</changelog>
<changelog author="rguenther@suse.com" date="1443614400">- Add gcc48-aarch64-bsc948168.patch to fix libffi issues on aarch64.
  [bsc#948168]</changelog>
<changelog author="rguenther@suse.com" date="1444132800">- Add gcc48-ppc-bnc949000.patch to fix build of SLOF.  [bnc#949000]
- Add gcc48-bnc945842.patch to fix C++11 std::random_device short
  reads, CVE-2015-5276.  [bnc#945842]</changelog>

</package>
<package pkgid="2f7822110c2b0623c79a2f822e3f3b8f2cbd93559903543cd5f8b13cc61736cd" name="libuuid-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="1115b085ed1cd99399a357f9d5956ccfec803676422406e38f369033fafa52bb" name="libuuid-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="2fcf3e3c762453d01f456da3ee7a0bebdb88861ed8392c143a4a0be972cb7d82" name="libuuid1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="a9306daa13d6160c8c27792a274b2cc958ce28d0684504ff58c72dcf7be739c1" name="libuuid1-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="8580a7e7314070e19b4a74e7517838c07633598801681df5983ef4c66a547f7d" name="libuuid1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="e013f036b05c3e217225e9b5f535487ff70cf97984863c18b2e13b93b253c4c0" name="libuuid1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="50be4c435a2321fd93a4965a66cd5c5b2624fa525af4d8eb03581c1f0a027403" name="libvmtools-devel" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="b77de11155fd307180afc9461588c76c5f51b5fa41a208b384658b14ddfee551" name="libvmtools0" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="4b116707cfcd14447b9c690a724860f106f025372b5a85e094975da62959b030" name="libvmtools0-debuginfo" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="bacc7d93bcede15f5e7eaffce4447014fd2ba41711667ea27a856c4bcfc8bc48" name="libwbclient-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="d3eb03f32b4c766692892dae63f7e10dd234395b41c2d4b7a457268f80f1e820" name="libwbclient0" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="39aea64df0e7b2765049e3a01a03c8f556b6d023d1151a8d734a39fd2f8451f4" name="libwbclient0-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="104ff0cba510184ed970659a881f385acfbe4319f51b302a4b97f85fc4da4166" name="libwbclient0-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="0990c617163bbdd4bccd508653b57b864109d5f5fdd392cab002ec3c9647d04d" name="libwbclient0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="cf2fe832e0c639739960bb12b417774ecd1b75a209142aeaa4d6a0dcb72c9f59" name="libyaml" arch="src">
    <version epoch="0" ver="0.1.6" rel="5.1"/>

<changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
<changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
<changelog author="jmassaguerpla@suse.com" date="1395921600">- update to 0.1.6 because this version contains the fixes for
  overflows bugs, including:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  * CVE-2013-6393: heap based buffer overflow due to integer misuse
  bnc#860617)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1417521600">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
<changelog author="alarrosa@suse.com" date="1446120000">- Add pkg-config as a BuildRequire so the package provides
  pkgconfig(yaml-0.1) (bnc#952625)</changelog>

</package>
<package pkgid="10565e2bf51aeb22f6630f36ebd2a22b2b9b692f68daf42e534e2bdb0840ce36" name="libyaml-0-2" arch="x86_64">
    <version epoch="0" ver="0.1.6" rel="5.1"/>

<changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
<changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
<changelog author="jmassaguerpla@suse.com" date="1395921600">- update to 0.1.6 because this version contains the fixes for
  overflows bugs, including:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  * CVE-2013-6393: heap based buffer overflow due to integer misuse
  bnc#860617)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1417521600">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
<changelog author="alarrosa@suse.com" date="1446120000">- Add pkg-config as a BuildRequire so the package provides
  pkgconfig(yaml-0.1) (bnc#952625)</changelog>

</package>
<package pkgid="9d0c4248f028631e8e1e27ae976304ba030f506fd413243fcc2d7ce68ccb3c71" name="libyaml-0-2-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.1.6" rel="5.1"/>

<changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
<changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
<changelog author="jmassaguerpla@suse.com" date="1395921600">- update to 0.1.6 because this version contains the fixes for
  overflows bugs, including:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  * CVE-2013-6393: heap based buffer overflow due to integer misuse
  bnc#860617)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1417521600">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
<changelog author="alarrosa@suse.com" date="1446120000">- Add pkg-config as a BuildRequire so the package provides
  pkgconfig(yaml-0.1) (bnc#952625)</changelog>

</package>
<package pkgid="0edf0d6ba447f5315204566ec8c61d9e6201d56c1642924a6d981b9fe53454ed" name="libyaml-debugsource" arch="x86_64">
    <version epoch="0" ver="0.1.6" rel="5.1"/>

<changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
<changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
<changelog author="jmassaguerpla@suse.com" date="1395921600">- update to 0.1.6 because this version contains the fixes for
  overflows bugs, including:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  * CVE-2013-6393: heap based buffer overflow due to integer misuse
  bnc#860617)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1417521600">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
<changelog author="alarrosa@suse.com" date="1446120000">- Add pkg-config as a BuildRequire so the package provides
  pkgconfig(yaml-0.1) (bnc#952625)</changelog>

</package>
<package pkgid="ab8bf2429cb199a74a2e2c928873c88383ff42e7495419f80538552dea01865d" name="libyaml-devel" arch="x86_64">
    <version epoch="0" ver="0.1.6" rel="5.1"/>

<changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
<changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
<changelog author="jmassaguerpla@suse.com" date="1395921600">- update to 0.1.6 because this version contains the fixes for
  overflows bugs, including:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  * CVE-2013-6393: heap based buffer overflow due to integer misuse
  bnc#860617)</changelog>
<changelog author="jmassaguerpla@suse.com" date="1417521600">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
<changelog author="alarrosa@suse.com" date="1446120000">- Add pkg-config as a BuildRequire so the package provides
  pkgconfig(yaml-0.1) (bnc#952625)</changelog>

</package>
<package pkgid="8919ba0a586c197e4c2b7b5a064b3f950e8edf60aa7c175aa4ee3a70d11a8a0a" name="marco" arch="src">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="d57a96c1f6bdbad45fb18e1212576b1e5a694f0b8de0716cc083f702b3410e37" name="marco" arch="x86_64">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="dd0160b8744c745d1b8085dfe3051fb84b0be0dc97a23e0b232abb5beed95478" name="marco-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="e4bb7cc0716b48d69e5f91a4676eb394bd179baaa93530188c4582cc6a188f6e" name="marco-debugsource" arch="x86_64">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="a29379195bfc9a02f18d8aa8cc528121f5ab87ef7a185e8e3183c597e9e7d355" name="marco-devel" arch="x86_64">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="d5d87ad7fc74347841cf8a657131493b3a453cfc04e9dc85f868588ff23ab821" name="marco-lang" arch="noarch">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="f683b03e6ba45e5336d7e9e576e815f799d0e3f499c27bd10bf227b90abbb448" name="marco-themes" arch="noarch">
    <version epoch="0" ver="1.10.3" rel="6.1"/>

<changelog author="p.drouand@gmail.com" date="1392033600">- Initial release (version 1.7.0)</changelog>
<changelog author="p.drouand@gmail.com" date="1394020800">- Update to version 1.8.0
  + implement side-by-side tiling
  + use yelp-tools instead of mate-doc-utils
  + cut with fading the bar title when it's longer than the decoration
    bar</changelog>
<changelog author="p.drouand@gmail.com" date="1394452800">- Obsolete mate-window-manager-lang package to avoid conflicting
  with it</changelog>
<changelog author="p.drouand@gmail.com" date="1394452801">- marco requires libmarco-private0 and mate-control-center requires
  it too; make libmarco-private0 ownusr/share/mate-control-center to
  avoid conflicts between packages</changelog>
<changelog author="p.drouand@gmail.com" date="1405166400">- Update to version 1.8.1
  + No changelog available</changelog>
<changelog author="p.drouand@gmail.com" date="1412337600">- Update to version 1.8.2
  + Tell we are Metacity to avoid issues with maximized Java
    applications
  + Tell to GTK3 that marco support _GTK_FRAME_EXTENTS hint</changelog>
<changelog author="p.drouand@gmail.com" date="1414584000">- Add marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; the windows
  can't be resized if builded with CSD</changelog>
<changelog author="p.drouand@gmail.com" date="1416052800">- Update to version 1.9.2 (unstable)
  + Use zenity instead of mate-dialogs
- Replace mate-dialogs build requirement with zenity
- Remove marco-1.8.2-fix-the-resizing-of-CSD-windows.patch; merged
  on current release</changelog>
<changelog author="p.drouand@gmail.com" date="1416052801">- Add dependency on mate-dialogs as Marco starts it for freezed
  windows.</changelog>
<changelog author="p.drouand@gmail.com" date="1416744000">- Update to version 1.9.3 (unstable)
  + Lot of GTK/GDK bug fixes</changelog>
<changelog author="p.drouand@gmail.com" date="1427112000">- Add marco-keybindings-pass-screen-name-instead-of.patch; pass screen
  name instead of number to error dialog (closes #150
  https://github.com/mate-desktop/marco/issues/150)</changelog>
<changelog author="p.drouand@gmail.com" date="1427112001">- Update to version 1.9.90 (unstable)
  * Bugfixes release</changelog>
<changelog author="p.drouand@gmail.com" date="1429099200">- Update to version 1.10.0
  * Bugfixes release
- Remove marco-keybindings-pass-screen-name-instead-of.patch; merged
  on upstream release</changelog>
<changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Assorted bugfixes.
- Spec cleanup.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1440158400">- Update to 1.10.2:
  * Remove outdated assertion.
  * Make minimize item insensitive when window should not be
    minimized.
  * Fix crash when struts change during grab operation.
  * Fix switching of fullscreen Direct3D applications running in
    Wine.
  * Update translations.</changelog>
<changelog author="sor.alexei@meowr.ru" date="1445947200">- Update to 1.10.3:
  * Fix crash with minimise animation.
  * Fix crash with window moving in some distributions (boo#953036).</changelog>

</package>
<package pkgid="22a69cfdff4ee17517290eb5bc3c8d94f4607fdc8d639a958dc8f8fab62858a0" name="mozilla-nspr" arch="src">
    <version epoch="0" ver="4.10.10" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1351166400">- update to version 4.9.3
  * bmo#749849: NSPR pthread_key_t leak and memory corruption.
  * bmo#794316: PR_PushIOLayer doesn't push layer on the top correctly
  * bmo#795213: clang's -Wtautological-constant-out-of-range-compare
    warns on prnetdb.c</changelog>
<changelog author="wr@rosenauer.org" date="1354276800">- update to version 4.9.4
  * bmo#757593: PR_IntervalNow not monotonic for Android, Linux,
    Mac OS X.
  * bmo#804806: Remove support for obsolete platforms (ncr, nec,
    sony, nextstep, sinix/reliantunix, and sunos4).
  * bmo#804833: Allow PR_FormatTime and PR_FormatTimeUSEnglish with
    NO_NSPR_10_SUPPORT. Fixed by Isaac Aggrey.</changelog>
<changelog author="dmueller@suse.com" date="1362052800">- Add config-guess-sub-update.diff:
  * update config.guess/sub for aarch64 support
- Add aarch64-support.patch:
  * add support for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1362052801">- update to version 4.9.5
  * bmo#634793: define NSPR's exact-width integer types PRInt{N} and
    PRUint{N} types to match the &lt;stdint.h&gt; exact-width integer types
    int{N}_t and uint{N}_t.
  * bmo#782815: passing 'int *' to parameter of type 'unsigned int *'
    in setsockopt().
  * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR.
  * bmo#824742: NSPR shouldn't require librt on Android.
  * bmo#831793: data race on lib-&gt;refCount in PR_UnloadLibrary.</changelog>
<changelog author="wr@rosenauer.org" date="1363435200">- update to version 4.9.6
  * aarch64 support
    (removed obsolete aarch64-support.patch)
  * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883)
  * Auto detect android api version for x86 (bmo#782214)
  * Initialize Windows CRITICAL_SECTIONs without debug info and
    with nonzero spin count (bmo#812085)</changelog>
<changelog author="wr@rosenauer.org" date="1370779200">- update to version 4.10
  * bmo#844513: Add AddressSanitizer (ASan) memory check annotations to
    PLArena.
  * bmo#849089: Simple changes to make NSPR's configure.in work with
    the current version of autoconf.
  * bmo#856196: Fix compiler warnings and clean up code in NSPR 4.10.
  * bmo#859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
  * bmo#859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  * bmo#861434: Make PR_SetThreadPriority() change priorities
    relatively to the main process instead of using absolute values on
    Linux.
  * bmo#871064L: _PR_InitThreads() should not call PR_SetThreadPriority.</changelog>
<changelog author="wr@rosenauer.org" date="1379851200">- update to version 4.10.1
  * bmo#888273: RWIN Scaling (RFC1323) limited to 2 on Windows 7 and 8
    (Windows only)
  * bmo#907512: Unix platforms shouldn't mask errors specific to
    Unix domain sockets</changelog>
<changelog author="wr@rosenauer.org" date="1384171200">- update to version 4.10.2
  relevant changes
  * bmo#770534: possible pointer overflow in PL_ArenaAllocate()
  * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add ppc64le-support.patch:
  * add support for powerpc64le-linux</changelog>
<changelog author="wr@rosenauer.org" date="1391688000">- update to version 4.10.3
  * bmo#749849: ensure we'll free the thread-specific data key.
  * bmo#941461: don't compile android with unaligned memory access.
  * bmo#932398: Add PR_SyncMemMap, a portable version of
    msync/FlushViewOfFile.
  * bmo#952621: Fix a thread-unsafe access to lock-&gt;owner in PR_Lock.
  * bmo#957458: Fix several bugs in the lock rank checking code.
  * bmo#936320: Use an alternative test for IPv6 support on Linux to
    avoid opening a socket.</changelog>
<changelog author="pcerny@suse.com" date="1393588800">- update of the PowerPC 64 LE support patch
  (renamed ppc64le-support.patch to nspr-ppc64le.patch)</changelog>
<changelog author="ro@suse.de" date="1393848000">- drop patch config-guess-sub-update.diff
  config.guess and config.sub are updated by the ppc64le patch</changelog>
<changelog author="wr@rosenauer.org" date="1394452800">- update to version 4.10.4
  * bmo#767759: Add support for new x32 abi
  * bmo#844784: Thread data race in PR_EnterMonitor
  * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root
  * bmo#958796: Users of _beginthreadex that set a custom stack size
    may not be getting the behavior they want
  * bmo#963033: AArch64 support update for NSPR
  * bmo#969061:	Incorrect end-of-list test when iterating over a
    PRCList in prcountr.c and prtrace.c
  * bmo#971152: IPv6 detection on linux depends on availability of
    /proc/net/if_inet6</changelog>
<changelog author="wr@rosenauer.org" date="1399464000">- update to version 4.10.5
  * autoconf updates
  * PPC64LE support
- dropped obsolete nspr-ppc64le.patch</changelog>
<changelog author="wr@rosenauer.org" date="1402401600">- update to version 4.10.6 (bnc#881874)
  * requirement for Firefox 30
  * PR_GetPhysicalMemorySize should release the mach_host_self()
    Mach port when done with it (bmo#1009270)
  * "Network address type not supported" error on the Hurd (bmo#1011861)
  * Clang Static Analysis: useless declaration in NSPR (bmo#1003946)
  * OOB write with sprintf and console functions (bmo#1018783)
    (CVE-2014-1545)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 4.10.7
  * bmo#836658: VC11+ defaults to SSE2 builds by default.
  * bmo#979278: TSan: data race nsprpub/pr/src/threads/prtpd.c:103
    PR_NewThreadPrivateIndex.
  * bmo#1026129: Replace some manual declarations of MSVC intrinsics with
    [#]include &lt;intrin.h&gt;.
  * bmo#1026469: Use AC_CHECK_LIB instead of MOZ_CHECK_PTHREADS. Skip
    compiler checks when using MSVC, even when $CC is
    not literally "cl".
  * bmo#1034415: NSPR hardcodes the C compiler to cl on Windows.
  * bmo#1042408: Compilation fix for Android &gt; API level 19.
  * bmo#1043082: NSPR's build system hardcodes -MD.</changelog>
<changelog author="wr@rosenauer.org" date="1422532800">- update to version 4.10.8
  * bmo#573192: remove the stack-based PRFileDesc cache.
  * bmo#756047: check for _POSIX_THREAD_PRIORITY_SCHEDULING &gt; 0 instead
    of only checking if the identifier is defined.
  * bmo#782113: Add NSPR support for FreeBSD ppc/ppc64/arm.
  * bmo#782124: Implement PR_GetPhysicalMemorySize on FreeBSD/DragonFly.
  * bmo#1060292: Make PR_Assert() and PR_Abort() output visible in the
    logcat on Android.
  * bmo#1089908: Fix variable shadowing in _PR_MD_LOCKFILE. Use
    PR_ARRAY_SIZE to get the array size of _PR_RUNQ(t-&gt;cpu).
  * bmo#1105144: Two places in NSPR's pruthr.c cast a pointer to long,
    which isn't correct on 64-bit Windows.
  * bmo#1060401: change import library name under mingw.
  * bmo#1106600: Replace PR_ASSERT(!"foo") with PR_NOT_REACHED("foo") t
    fix clang -Wstring-conversion warnings.
  * bmo#1107063: link NSPR libs with -soname on OpenBSD.
  * bmo#1120772: Avoid defining snprintf when MSVC provides it.</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1440158400">- update to version 4.10.9
  * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal
  * bmo#1030692: Make compiling nspr on windows possible again.
  * bmo#1088790: dosprint() doesn't support %zu and other size formats
  * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++
    conformance) option
  * bmo#1153610: MIPS64: Add support for n64 ABI
  * bmo#1156029: Teach clang-analyzer about PR_ASSERT
  * bmo#1160125: MSVC version detection is broken CC is set to a wrapper
    (like sccache)
  * bmo#1163346: Add NSPR support for FreeBSD mips/mips64
  * bmo#1169185: Add support for OpenRISC (or1k)
  * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR
  * bmo#1174781: PR_GetInheritedFD can use uninitialized variables</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to version 4.10.10 (bnc#952810)
  * MFSA 2015-133/CVE-2015-7183 (bmo#1205157)
    memory corruption issues</changelog>

</package>
<package pkgid="bdd144085990f31a00e65dab109aac986b3a0b4f54fc73f628179ea8c581019b" name="mozilla-nspr" arch="x86_64">
    <version epoch="0" ver="4.10.10" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1351166400">- update to version 4.9.3
  * bmo#749849: NSPR pthread_key_t leak and memory corruption.
  * bmo#794316: PR_PushIOLayer doesn't push layer on the top correctly
  * bmo#795213: clang's -Wtautological-constant-out-of-range-compare
    warns on prnetdb.c</changelog>
<changelog author="wr@rosenauer.org" date="1354276800">- update to version 4.9.4
  * bmo#757593: PR_IntervalNow not monotonic for Android, Linux,
    Mac OS X.
  * bmo#804806: Remove support for obsolete platforms (ncr, nec,
    sony, nextstep, sinix/reliantunix, and sunos4).
  * bmo#804833: Allow PR_FormatTime and PR_FormatTimeUSEnglish with
    NO_NSPR_10_SUPPORT. Fixed by Isaac Aggrey.</changelog>
<changelog author="dmueller@suse.com" date="1362052800">- Add config-guess-sub-update.diff:
  * update config.guess/sub for aarch64 support
- Add aarch64-support.patch:
  * add support for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1362052801">- update to version 4.9.5
  * bmo#634793: define NSPR's exact-width integer types PRInt{N} and
    PRUint{N} types to match the &lt;stdint.h&gt; exact-width integer types
    int{N}_t and uint{N}_t.
  * bmo#782815: passing 'int *' to parameter of type 'unsigned int *'
    in setsockopt().
  * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR.
  * bmo#824742: NSPR shouldn't require librt on Android.
  * bmo#831793: data race on lib-&gt;refCount in PR_UnloadLibrary.</changelog>
<changelog author="wr@rosenauer.org" date="1363435200">- update to version 4.9.6
  * aarch64 support
    (removed obsolete aarch64-support.patch)
  * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883)
  * Auto detect android api version for x86 (bmo#782214)
  * Initialize Windows CRITICAL_SECTIONs without debug info and
    with nonzero spin count (bmo#812085)</changelog>
<changelog author="wr@rosenauer.org" date="1370779200">- update to version 4.10
  * bmo#844513: Add AddressSanitizer (ASan) memory check annotations to
    PLArena.
  * bmo#849089: Simple changes to make NSPR's configure.in work with
    the current version of autoconf.
  * bmo#856196: Fix compiler warnings and clean up code in NSPR 4.10.
  * bmo#859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
  * bmo#859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  * bmo#861434: Make PR_SetThreadPriority() change priorities
    relatively to the main process instead of using absolute values on
    Linux.
  * bmo#871064L: _PR_InitThreads() should not call PR_SetThreadPriority.</changelog>
<changelog author="wr@rosenauer.org" date="1379851200">- update to version 4.10.1
  * bmo#888273: RWIN Scaling (RFC1323) limited to 2 on Windows 7 and 8
    (Windows only)
  * bmo#907512: Unix platforms shouldn't mask errors specific to
    Unix domain sockets</changelog>
<changelog author="wr@rosenauer.org" date="1384171200">- update to version 4.10.2
  relevant changes
  * bmo#770534: possible pointer overflow in PL_ArenaAllocate()
  * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add ppc64le-support.patch:
  * add support for powerpc64le-linux</changelog>
<changelog author="wr@rosenauer.org" date="1391688000">- update to version 4.10.3
  * bmo#749849: ensure we'll free the thread-specific data key.
  * bmo#941461: don't compile android with unaligned memory access.
  * bmo#932398: Add PR_SyncMemMap, a portable version of
    msync/FlushViewOfFile.
  * bmo#952621: Fix a thread-unsafe access to lock-&gt;owner in PR_Lock.
  * bmo#957458: Fix several bugs in the lock rank checking code.
  * bmo#936320: Use an alternative test for IPv6 support on Linux to
    avoid opening a socket.</changelog>
<changelog author="pcerny@suse.com" date="1393588800">- update of the PowerPC 64 LE support patch
  (renamed ppc64le-support.patch to nspr-ppc64le.patch)</changelog>
<changelog author="ro@suse.de" date="1393848000">- drop patch config-guess-sub-update.diff
  config.guess and config.sub are updated by the ppc64le patch</changelog>
<changelog author="wr@rosenauer.org" date="1394452800">- update to version 4.10.4
  * bmo#767759: Add support for new x32 abi
  * bmo#844784: Thread data race in PR_EnterMonitor
  * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root
  * bmo#958796: Users of _beginthreadex that set a custom stack size
    may not be getting the behavior they want
  * bmo#963033: AArch64 support update for NSPR
  * bmo#969061:	Incorrect end-of-list test when iterating over a
    PRCList in prcountr.c and prtrace.c
  * bmo#971152: IPv6 detection on linux depends on availability of
    /proc/net/if_inet6</changelog>
<changelog author="wr@rosenauer.org" date="1399464000">- update to version 4.10.5
  * autoconf updates
  * PPC64LE support
- dropped obsolete nspr-ppc64le.patch</changelog>
<changelog author="wr@rosenauer.org" date="1402401600">- update to version 4.10.6 (bnc#881874)
  * requirement for Firefox 30
  * PR_GetPhysicalMemorySize should release the mach_host_self()
    Mach port when done with it (bmo#1009270)
  * "Network address type not supported" error on the Hurd (bmo#1011861)
  * Clang Static Analysis: useless declaration in NSPR (bmo#1003946)
  * OOB write with sprintf and console functions (bmo#1018783)
    (CVE-2014-1545)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 4.10.7
  * bmo#836658: VC11+ defaults to SSE2 builds by default.
  * bmo#979278: TSan: data race nsprpub/pr/src/threads/prtpd.c:103
    PR_NewThreadPrivateIndex.
  * bmo#1026129: Replace some manual declarations of MSVC intrinsics with
    [#]include &lt;intrin.h&gt;.
  * bmo#1026469: Use AC_CHECK_LIB instead of MOZ_CHECK_PTHREADS. Skip
    compiler checks when using MSVC, even when $CC is
    not literally "cl".
  * bmo#1034415: NSPR hardcodes the C compiler to cl on Windows.
  * bmo#1042408: Compilation fix for Android &gt; API level 19.
  * bmo#1043082: NSPR's build system hardcodes -MD.</changelog>
<changelog author="wr@rosenauer.org" date="1422532800">- update to version 4.10.8
  * bmo#573192: remove the stack-based PRFileDesc cache.
  * bmo#756047: check for _POSIX_THREAD_PRIORITY_SCHEDULING &gt; 0 instead
    of only checking if the identifier is defined.
  * bmo#782113: Add NSPR support for FreeBSD ppc/ppc64/arm.
  * bmo#782124: Implement PR_GetPhysicalMemorySize on FreeBSD/DragonFly.
  * bmo#1060292: Make PR_Assert() and PR_Abort() output visible in the
    logcat on Android.
  * bmo#1089908: Fix variable shadowing in _PR_MD_LOCKFILE. Use
    PR_ARRAY_SIZE to get the array size of _PR_RUNQ(t-&gt;cpu).
  * bmo#1105144: Two places in NSPR's pruthr.c cast a pointer to long,
    which isn't correct on 64-bit Windows.
  * bmo#1060401: change import library name under mingw.
  * bmo#1106600: Replace PR_ASSERT(!"foo") with PR_NOT_REACHED("foo") t
    fix clang -Wstring-conversion warnings.
  * bmo#1107063: link NSPR libs with -soname on OpenBSD.
  * bmo#1120772: Avoid defining snprintf when MSVC provides it.</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1440158400">- update to version 4.10.9
  * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal
  * bmo#1030692: Make compiling nspr on windows possible again.
  * bmo#1088790: dosprint() doesn't support %zu and other size formats
  * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++
    conformance) option
  * bmo#1153610: MIPS64: Add support for n64 ABI
  * bmo#1156029: Teach clang-analyzer about PR_ASSERT
  * bmo#1160125: MSVC version detection is broken CC is set to a wrapper
    (like sccache)
  * bmo#1163346: Add NSPR support for FreeBSD mips/mips64
  * bmo#1169185: Add support for OpenRISC (or1k)
  * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR
  * bmo#1174781: PR_GetInheritedFD can use uninitialized variables</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to version 4.10.10 (bnc#952810)
  * MFSA 2015-133/CVE-2015-7183 (bmo#1205157)
    memory corruption issues</changelog>

</package>
<package pkgid="80d1c4c057c01ee579810038b726c74d85370eff3abe439e228810f27d6e4380" name="mozilla-nspr-32bit" arch="x86_64">
    <version epoch="0" ver="4.10.10" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1351166400">- update to version 4.9.3
  * bmo#749849: NSPR pthread_key_t leak and memory corruption.
  * bmo#794316: PR_PushIOLayer doesn't push layer on the top correctly
  * bmo#795213: clang's -Wtautological-constant-out-of-range-compare
    warns on prnetdb.c</changelog>
<changelog author="wr@rosenauer.org" date="1354276800">- update to version 4.9.4
  * bmo#757593: PR_IntervalNow not monotonic for Android, Linux,
    Mac OS X.
  * bmo#804806: Remove support for obsolete platforms (ncr, nec,
    sony, nextstep, sinix/reliantunix, and sunos4).
  * bmo#804833: Allow PR_FormatTime and PR_FormatTimeUSEnglish with
    NO_NSPR_10_SUPPORT. Fixed by Isaac Aggrey.</changelog>
<changelog author="dmueller@suse.com" date="1362052800">- Add config-guess-sub-update.diff:
  * update config.guess/sub for aarch64 support
- Add aarch64-support.patch:
  * add support for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1362052801">- update to version 4.9.5
  * bmo#634793: define NSPR's exact-width integer types PRInt{N} and
    PRUint{N} types to match the &lt;stdint.h&gt; exact-width integer types
    int{N}_t and uint{N}_t.
  * bmo#782815: passing 'int *' to parameter of type 'unsigned int *'
    in setsockopt().
  * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR.
  * bmo#824742: NSPR shouldn't require librt on Android.
  * bmo#831793: data race on lib-&gt;refCount in PR_UnloadLibrary.</changelog>
<changelog author="wr@rosenauer.org" date="1363435200">- update to version 4.9.6
  * aarch64 support
    (removed obsolete aarch64-support.patch)
  * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883)
  * Auto detect android api version for x86 (bmo#782214)
  * Initialize Windows CRITICAL_SECTIONs without debug info and
    with nonzero spin count (bmo#812085)</changelog>
<changelog author="wr@rosenauer.org" date="1370779200">- update to version 4.10
  * bmo#844513: Add AddressSanitizer (ASan) memory check annotations to
    PLArena.
  * bmo#849089: Simple changes to make NSPR's configure.in work with
    the current version of autoconf.
  * bmo#856196: Fix compiler warnings and clean up code in NSPR 4.10.
  * bmo#859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
  * bmo#859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  * bmo#861434: Make PR_SetThreadPriority() change priorities
    relatively to the main process instead of using absolute values on
    Linux.
  * bmo#871064L: _PR_InitThreads() should not call PR_SetThreadPriority.</changelog>
<changelog author="wr@rosenauer.org" date="1379851200">- update to version 4.10.1
  * bmo#888273: RWIN Scaling (RFC1323) limited to 2 on Windows 7 and 8
    (Windows only)
  * bmo#907512: Unix platforms shouldn't mask errors specific to
    Unix domain sockets</changelog>
<changelog author="wr@rosenauer.org" date="1384171200">- update to version 4.10.2
  relevant changes
  * bmo#770534: possible pointer overflow in PL_ArenaAllocate()
  * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add ppc64le-support.patch:
  * add support for powerpc64le-linux</changelog>
<changelog author="wr@rosenauer.org" date="1391688000">- update to version 4.10.3
  * bmo#749849: ensure we'll free the thread-specific data key.
  * bmo#941461: don't compile android with unaligned memory access.
  * bmo#932398: Add PR_SyncMemMap, a portable version of
    msync/FlushViewOfFile.
  * bmo#952621: Fix a thread-unsafe access to lock-&gt;owner in PR_Lock.
  * bmo#957458: Fix several bugs in the lock rank checking code.
  * bmo#936320: Use an alternative test for IPv6 support on Linux to
    avoid opening a socket.</changelog>
<changelog author="pcerny@suse.com" date="1393588800">- update of the PowerPC 64 LE support patch
  (renamed ppc64le-support.patch to nspr-ppc64le.patch)</changelog>
<changelog author="ro@suse.de" date="1393848000">- drop patch config-guess-sub-update.diff
  config.guess and config.sub are updated by the ppc64le patch</changelog>
<changelog author="wr@rosenauer.org" date="1394452800">- update to version 4.10.4
  * bmo#767759: Add support for new x32 abi
  * bmo#844784: Thread data race in PR_EnterMonitor
  * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root
  * bmo#958796: Users of _beginthreadex that set a custom stack size
    may not be getting the behavior they want
  * bmo#963033: AArch64 support update for NSPR
  * bmo#969061:	Incorrect end-of-list test when iterating over a
    PRCList in prcountr.c and prtrace.c
  * bmo#971152: IPv6 detection on linux depends on availability of
    /proc/net/if_inet6</changelog>
<changelog author="wr@rosenauer.org" date="1399464000">- update to version 4.10.5
  * autoconf updates
  * PPC64LE support
- dropped obsolete nspr-ppc64le.patch</changelog>
<changelog author="wr@rosenauer.org" date="1402401600">- update to version 4.10.6 (bnc#881874)
  * requirement for Firefox 30
  * PR_GetPhysicalMemorySize should release the mach_host_self()
    Mach port when done with it (bmo#1009270)
  * "Network address type not supported" error on the Hurd (bmo#1011861)
  * Clang Static Analysis: useless declaration in NSPR (bmo#1003946)
  * OOB write with sprintf and console functions (bmo#1018783)
    (CVE-2014-1545)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 4.10.7
  * bmo#836658: VC11+ defaults to SSE2 builds by default.
  * bmo#979278: TSan: data race nsprpub/pr/src/threads/prtpd.c:103
    PR_NewThreadPrivateIndex.
  * bmo#1026129: Replace some manual declarations of MSVC intrinsics with
    [#]include &lt;intrin.h&gt;.
  * bmo#1026469: Use AC_CHECK_LIB instead of MOZ_CHECK_PTHREADS. Skip
    compiler checks when using MSVC, even when $CC is
    not literally "cl".
  * bmo#1034415: NSPR hardcodes the C compiler to cl on Windows.
  * bmo#1042408: Compilation fix for Android &gt; API level 19.
  * bmo#1043082: NSPR's build system hardcodes -MD.</changelog>
<changelog author="wr@rosenauer.org" date="1422532800">- update to version 4.10.8
  * bmo#573192: remove the stack-based PRFileDesc cache.
  * bmo#756047: check for _POSIX_THREAD_PRIORITY_SCHEDULING &gt; 0 instead
    of only checking if the identifier is defined.
  * bmo#782113: Add NSPR support for FreeBSD ppc/ppc64/arm.
  * bmo#782124: Implement PR_GetPhysicalMemorySize on FreeBSD/DragonFly.
  * bmo#1060292: Make PR_Assert() and PR_Abort() output visible in the
    logcat on Android.
  * bmo#1089908: Fix variable shadowing in _PR_MD_LOCKFILE. Use
    PR_ARRAY_SIZE to get the array size of _PR_RUNQ(t-&gt;cpu).
  * bmo#1105144: Two places in NSPR's pruthr.c cast a pointer to long,
    which isn't correct on 64-bit Windows.
  * bmo#1060401: change import library name under mingw.
  * bmo#1106600: Replace PR_ASSERT(!"foo") with PR_NOT_REACHED("foo") t
    fix clang -Wstring-conversion warnings.
  * bmo#1107063: link NSPR libs with -soname on OpenBSD.
  * bmo#1120772: Avoid defining snprintf when MSVC provides it.</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1440158400">- update to version 4.10.9
  * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal
  * bmo#1030692: Make compiling nspr on windows possible again.
  * bmo#1088790: dosprint() doesn't support %zu and other size formats
  * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++
    conformance) option
  * bmo#1153610: MIPS64: Add support for n64 ABI
  * bmo#1156029: Teach clang-analyzer about PR_ASSERT
  * bmo#1160125: MSVC version detection is broken CC is set to a wrapper
    (like sccache)
  * bmo#1163346: Add NSPR support for FreeBSD mips/mips64
  * bmo#1169185: Add support for OpenRISC (or1k)
  * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR
  * bmo#1174781: PR_GetInheritedFD can use uninitialized variables</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to version 4.10.10 (bnc#952810)
  * MFSA 2015-133/CVE-2015-7183 (bmo#1205157)
    memory corruption issues</changelog>

</package>
<package pkgid="f56e461bf6faa07c3916c04d33be95a23b0b6c958a8ecda09122199c40b11357" name="mozilla-nspr-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.10.10" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1351166400">- update to version 4.9.3
  * bmo#749849: NSPR pthread_key_t leak and memory corruption.
  * bmo#794316: PR_PushIOLayer doesn't push layer on the top correctly
  * bmo#795213: clang's -Wtautological-constant-out-of-range-compare
    warns on prnetdb.c</changelog>
<changelog author="wr@rosenauer.org" date="1354276800">- update to version 4.9.4
  * bmo#757593: PR_IntervalNow not monotonic for Android, Linux,
    Mac OS X.
  * bmo#804806: Remove support for obsolete platforms (ncr, nec,
    sony, nextstep, sinix/reliantunix, and sunos4).
  * bmo#804833: Allow PR_FormatTime and PR_FormatTimeUSEnglish with
    NO_NSPR_10_SUPPORT. Fixed by Isaac Aggrey.</changelog>
<changelog author="dmueller@suse.com" date="1362052800">- Add config-guess-sub-update.diff:
  * update config.guess/sub for aarch64 support
- Add aarch64-support.patch:
  * add support for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1362052801">- update to version 4.9.5
  * bmo#634793: define NSPR's exact-width integer types PRInt{N} and
    PRUint{N} types to match the &lt;stdint.h&gt; exact-width integer types
    int{N}_t and uint{N}_t.
  * bmo#782815: passing 'int *' to parameter of type 'unsigned int *'
    in setsockopt().
  * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR.
  * bmo#824742: NSPR shouldn't require librt on Android.
  * bmo#831793: data race on lib-&gt;refCount in PR_UnloadLibrary.</changelog>
<changelog author="wr@rosenauer.org" date="1363435200">- update to version 4.9.6
  * aarch64 support
    (removed obsolete aarch64-support.patch)
  * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883)
  * Auto detect android api version for x86 (bmo#782214)
  * Initialize Windows CRITICAL_SECTIONs without debug info and
    with nonzero spin count (bmo#812085)</changelog>
<changelog author="wr@rosenauer.org" date="1370779200">- update to version 4.10
  * bmo#844513: Add AddressSanitizer (ASan) memory check annotations to
    PLArena.
  * bmo#849089: Simple changes to make NSPR's configure.in work with
    the current version of autoconf.
  * bmo#856196: Fix compiler warnings and clean up code in NSPR 4.10.
  * bmo#859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
  * bmo#859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  * bmo#861434: Make PR_SetThreadPriority() change priorities
    relatively to the main process instead of using absolute values on
    Linux.
  * bmo#871064L: _PR_InitThreads() should not call PR_SetThreadPriority.</changelog>
<changelog author="wr@rosenauer.org" date="1379851200">- update to version 4.10.1
  * bmo#888273: RWIN Scaling (RFC1323) limited to 2 on Windows 7 and 8
    (Windows only)
  * bmo#907512: Unix platforms shouldn't mask errors specific to
    Unix domain sockets</changelog>
<changelog author="wr@rosenauer.org" date="1384171200">- update to version 4.10.2
  relevant changes
  * bmo#770534: possible pointer overflow in PL_ArenaAllocate()
  * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add ppc64le-support.patch:
  * add support for powerpc64le-linux</changelog>
<changelog author="wr@rosenauer.org" date="1391688000">- update to version 4.10.3
  * bmo#749849: ensure we'll free the thread-specific data key.
  * bmo#941461: don't compile android with unaligned memory access.
  * bmo#932398: Add PR_SyncMemMap, a portable version of
    msync/FlushViewOfFile.
  * bmo#952621: Fix a thread-unsafe access to lock-&gt;owner in PR_Lock.
  * bmo#957458: Fix several bugs in the lock rank checking code.
  * bmo#936320: Use an alternative test for IPv6 support on Linux to
    avoid opening a socket.</changelog>
<changelog author="pcerny@suse.com" date="1393588800">- update of the PowerPC 64 LE support patch
  (renamed ppc64le-support.patch to nspr-ppc64le.patch)</changelog>
<changelog author="ro@suse.de" date="1393848000">- drop patch config-guess-sub-update.diff
  config.guess and config.sub are updated by the ppc64le patch</changelog>
<changelog author="wr@rosenauer.org" date="1394452800">- update to version 4.10.4
  * bmo#767759: Add support for new x32 abi
  * bmo#844784: Thread data race in PR_EnterMonitor
  * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root
  * bmo#958796: Users of _beginthreadex that set a custom stack size
    may not be getting the behavior they want
  * bmo#963033: AArch64 support update for NSPR
  * bmo#969061:	Incorrect end-of-list test when iterating over a
    PRCList in prcountr.c and prtrace.c
  * bmo#971152: IPv6 detection on linux depends on availability of
    /proc/net/if_inet6</changelog>
<changelog author="wr@rosenauer.org" date="1399464000">- update to version 4.10.5
  * autoconf updates
  * PPC64LE support
- dropped obsolete nspr-ppc64le.patch</changelog>
<changelog author="wr@rosenauer.org" date="1402401600">- update to version 4.10.6 (bnc#881874)
  * requirement for Firefox 30
  * PR_GetPhysicalMemorySize should release the mach_host_self()
    Mach port when done with it (bmo#1009270)
  * "Network address type not supported" error on the Hurd (bmo#1011861)
  * Clang Static Analysis: useless declaration in NSPR (bmo#1003946)
  * OOB write with sprintf and console functions (bmo#1018783)
    (CVE-2014-1545)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 4.10.7
  * bmo#836658: VC11+ defaults to SSE2 builds by default.
  * bmo#979278: TSan: data race nsprpub/pr/src/threads/prtpd.c:103
    PR_NewThreadPrivateIndex.
  * bmo#1026129: Replace some manual declarations of MSVC intrinsics with
    [#]include &lt;intrin.h&gt;.
  * bmo#1026469: Use AC_CHECK_LIB instead of MOZ_CHECK_PTHREADS. Skip
    compiler checks when using MSVC, even when $CC is
    not literally "cl".
  * bmo#1034415: NSPR hardcodes the C compiler to cl on Windows.
  * bmo#1042408: Compilation fix for Android &gt; API level 19.
  * bmo#1043082: NSPR's build system hardcodes -MD.</changelog>
<changelog author="wr@rosenauer.org" date="1422532800">- update to version 4.10.8
  * bmo#573192: remove the stack-based PRFileDesc cache.
  * bmo#756047: check for _POSIX_THREAD_PRIORITY_SCHEDULING &gt; 0 instead
    of only checking if the identifier is defined.
  * bmo#782113: Add NSPR support for FreeBSD ppc/ppc64/arm.
  * bmo#782124: Implement PR_GetPhysicalMemorySize on FreeBSD/DragonFly.
  * bmo#1060292: Make PR_Assert() and PR_Abort() output visible in the
    logcat on Android.
  * bmo#1089908: Fix variable shadowing in _PR_MD_LOCKFILE. Use
    PR_ARRAY_SIZE to get the array size of _PR_RUNQ(t-&gt;cpu).
  * bmo#1105144: Two places in NSPR's pruthr.c cast a pointer to long,
    which isn't correct on 64-bit Windows.
  * bmo#1060401: change import library name under mingw.
  * bmo#1106600: Replace PR_ASSERT(!"foo") with PR_NOT_REACHED("foo") t
    fix clang -Wstring-conversion warnings.
  * bmo#1107063: link NSPR libs with -soname on OpenBSD.
  * bmo#1120772: Avoid defining snprintf when MSVC provides it.</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1440158400">- update to version 4.10.9
  * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal
  * bmo#1030692: Make compiling nspr on windows possible again.
  * bmo#1088790: dosprint() doesn't support %zu and other size formats
  * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++
    conformance) option
  * bmo#1153610: MIPS64: Add support for n64 ABI
  * bmo#1156029: Teach clang-analyzer about PR_ASSERT
  * bmo#1160125: MSVC version detection is broken CC is set to a wrapper
    (like sccache)
  * bmo#1163346: Add NSPR support for FreeBSD mips/mips64
  * bmo#1169185: Add support for OpenRISC (or1k)
  * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR
  * bmo#1174781: PR_GetInheritedFD can use uninitialized variables</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to version 4.10.10 (bnc#952810)
  * MFSA 2015-133/CVE-2015-7183 (bmo#1205157)
    memory corruption issues</changelog>

</package>
<package pkgid="c36730549ee9fc2d7368c6186979655bd646474af6d7a266a03cefeacd2e3f40" name="mozilla-nspr-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.10.10" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1351166400">- update to version 4.9.3
  * bmo#749849: NSPR pthread_key_t leak and memory corruption.
  * bmo#794316: PR_PushIOLayer doesn't push layer on the top correctly
  * bmo#795213: clang's -Wtautological-constant-out-of-range-compare
    warns on prnetdb.c</changelog>
<changelog author="wr@rosenauer.org" date="1354276800">- update to version 4.9.4
  * bmo#757593: PR_IntervalNow not monotonic for Android, Linux,
    Mac OS X.
  * bmo#804806: Remove support for obsolete platforms (ncr, nec,
    sony, nextstep, sinix/reliantunix, and sunos4).
  * bmo#804833: Allow PR_FormatTime and PR_FormatTimeUSEnglish with
    NO_NSPR_10_SUPPORT. Fixed by Isaac Aggrey.</changelog>
<changelog author="dmueller@suse.com" date="1362052800">- Add config-guess-sub-update.diff:
  * update config.guess/sub for aarch64 support
- Add aarch64-support.patch:
  * add support for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1362052801">- update to version 4.9.5
  * bmo#634793: define NSPR's exact-width integer types PRInt{N} and
    PRUint{N} types to match the &lt;stdint.h&gt; exact-width integer types
    int{N}_t and uint{N}_t.
  * bmo#782815: passing 'int *' to parameter of type 'unsigned int *'
    in setsockopt().
  * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR.
  * bmo#824742: NSPR shouldn't require librt on Android.
  * bmo#831793: data race on lib-&gt;refCount in PR_UnloadLibrary.</changelog>
<changelog author="wr@rosenauer.org" date="1363435200">- update to version 4.9.6
  * aarch64 support
    (removed obsolete aarch64-support.patch)
  * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883)
  * Auto detect android api version for x86 (bmo#782214)
  * Initialize Windows CRITICAL_SECTIONs without debug info and
    with nonzero spin count (bmo#812085)</changelog>
<changelog author="wr@rosenauer.org" date="1370779200">- update to version 4.10
  * bmo#844513: Add AddressSanitizer (ASan) memory check annotations to
    PLArena.
  * bmo#849089: Simple changes to make NSPR's configure.in work with
    the current version of autoconf.
  * bmo#856196: Fix compiler warnings and clean up code in NSPR 4.10.
  * bmo#859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
  * bmo#859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  * bmo#861434: Make PR_SetThreadPriority() change priorities
    relatively to the main process instead of using absolute values on
    Linux.
  * bmo#871064L: _PR_InitThreads() should not call PR_SetThreadPriority.</changelog>
<changelog author="wr@rosenauer.org" date="1379851200">- update to version 4.10.1
  * bmo#888273: RWIN Scaling (RFC1323) limited to 2 on Windows 7 and 8
    (Windows only)
  * bmo#907512: Unix platforms shouldn't mask errors specific to
    Unix domain sockets</changelog>
<changelog author="wr@rosenauer.org" date="1384171200">- update to version 4.10.2
  relevant changes
  * bmo#770534: possible pointer overflow in PL_ArenaAllocate()
  * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add ppc64le-support.patch:
  * add support for powerpc64le-linux</changelog>
<changelog author="wr@rosenauer.org" date="1391688000">- update to version 4.10.3
  * bmo#749849: ensure we'll free the thread-specific data key.
  * bmo#941461: don't compile android with unaligned memory access.
  * bmo#932398: Add PR_SyncMemMap, a portable version of
    msync/FlushViewOfFile.
  * bmo#952621: Fix a thread-unsafe access to lock-&gt;owner in PR_Lock.
  * bmo#957458: Fix several bugs in the lock rank checking code.
  * bmo#936320: Use an alternative test for IPv6 support on Linux to
    avoid opening a socket.</changelog>
<changelog author="pcerny@suse.com" date="1393588800">- update of the PowerPC 64 LE support patch
  (renamed ppc64le-support.patch to nspr-ppc64le.patch)</changelog>
<changelog author="ro@suse.de" date="1393848000">- drop patch config-guess-sub-update.diff
  config.guess and config.sub are updated by the ppc64le patch</changelog>
<changelog author="wr@rosenauer.org" date="1394452800">- update to version 4.10.4
  * bmo#767759: Add support for new x32 abi
  * bmo#844784: Thread data race in PR_EnterMonitor
  * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root
  * bmo#958796: Users of _beginthreadex that set a custom stack size
    may not be getting the behavior they want
  * bmo#963033: AArch64 support update for NSPR
  * bmo#969061:	Incorrect end-of-list test when iterating over a
    PRCList in prcountr.c and prtrace.c
  * bmo#971152: IPv6 detection on linux depends on availability of
    /proc/net/if_inet6</changelog>
<changelog author="wr@rosenauer.org" date="1399464000">- update to version 4.10.5
  * autoconf updates
  * PPC64LE support
- dropped obsolete nspr-ppc64le.patch</changelog>
<changelog author="wr@rosenauer.org" date="1402401600">- update to version 4.10.6 (bnc#881874)
  * requirement for Firefox 30
  * PR_GetPhysicalMemorySize should release the mach_host_self()
    Mach port when done with it (bmo#1009270)
  * "Network address type not supported" error on the Hurd (bmo#1011861)
  * Clang Static Analysis: useless declaration in NSPR (bmo#1003946)
  * OOB write with sprintf and console functions (bmo#1018783)
    (CVE-2014-1545)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 4.10.7
  * bmo#836658: VC11+ defaults to SSE2 builds by default.
  * bmo#979278: TSan: data race nsprpub/pr/src/threads/prtpd.c:103
    PR_NewThreadPrivateIndex.
  * bmo#1026129: Replace some manual declarations of MSVC intrinsics with
    [#]include &lt;intrin.h&gt;.
  * bmo#1026469: Use AC_CHECK_LIB instead of MOZ_CHECK_PTHREADS. Skip
    compiler checks when using MSVC, even when $CC is
    not literally "cl".
  * bmo#1034415: NSPR hardcodes the C compiler to cl on Windows.
  * bmo#1042408: Compilation fix for Android &gt; API level 19.
  * bmo#1043082: NSPR's build system hardcodes -MD.</changelog>
<changelog author="wr@rosenauer.org" date="1422532800">- update to version 4.10.8
  * bmo#573192: remove the stack-based PRFileDesc cache.
  * bmo#756047: check for _POSIX_THREAD_PRIORITY_SCHEDULING &gt; 0 instead
    of only checking if the identifier is defined.
  * bmo#782113: Add NSPR support for FreeBSD ppc/ppc64/arm.
  * bmo#782124: Implement PR_GetPhysicalMemorySize on FreeBSD/DragonFly.
  * bmo#1060292: Make PR_Assert() and PR_Abort() output visible in the
    logcat on Android.
  * bmo#1089908: Fix variable shadowing in _PR_MD_LOCKFILE. Use
    PR_ARRAY_SIZE to get the array size of _PR_RUNQ(t-&gt;cpu).
  * bmo#1105144: Two places in NSPR's pruthr.c cast a pointer to long,
    which isn't correct on 64-bit Windows.
  * bmo#1060401: change import library name under mingw.
  * bmo#1106600: Replace PR_ASSERT(!"foo") with PR_NOT_REACHED("foo") t
    fix clang -Wstring-conversion warnings.
  * bmo#1107063: link NSPR libs with -soname on OpenBSD.
  * bmo#1120772: Avoid defining snprintf when MSVC provides it.</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1440158400">- update to version 4.10.9
  * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal
  * bmo#1030692: Make compiling nspr on windows possible again.
  * bmo#1088790: dosprint() doesn't support %zu and other size formats
  * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++
    conformance) option
  * bmo#1153610: MIPS64: Add support for n64 ABI
  * bmo#1156029: Teach clang-analyzer about PR_ASSERT
  * bmo#1160125: MSVC version detection is broken CC is set to a wrapper
    (like sccache)
  * bmo#1163346: Add NSPR support for FreeBSD mips/mips64
  * bmo#1169185: Add support for OpenRISC (or1k)
  * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR
  * bmo#1174781: PR_GetInheritedFD can use uninitialized variables</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to version 4.10.10 (bnc#952810)
  * MFSA 2015-133/CVE-2015-7183 (bmo#1205157)
    memory corruption issues</changelog>

</package>
<package pkgid="b88ddcfc5188220b348ff52f685c00cd77b916c8768e6caba380003ee49ca229" name="mozilla-nspr-debugsource" arch="x86_64">
    <version epoch="0" ver="4.10.10" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1351166400">- update to version 4.9.3
  * bmo#749849: NSPR pthread_key_t leak and memory corruption.
  * bmo#794316: PR_PushIOLayer doesn't push layer on the top correctly
  * bmo#795213: clang's -Wtautological-constant-out-of-range-compare
    warns on prnetdb.c</changelog>
<changelog author="wr@rosenauer.org" date="1354276800">- update to version 4.9.4
  * bmo#757593: PR_IntervalNow not monotonic for Android, Linux,
    Mac OS X.
  * bmo#804806: Remove support for obsolete platforms (ncr, nec,
    sony, nextstep, sinix/reliantunix, and sunos4).
  * bmo#804833: Allow PR_FormatTime and PR_FormatTimeUSEnglish with
    NO_NSPR_10_SUPPORT. Fixed by Isaac Aggrey.</changelog>
<changelog author="dmueller@suse.com" date="1362052800">- Add config-guess-sub-update.diff:
  * update config.guess/sub for aarch64 support
- Add aarch64-support.patch:
  * add support for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1362052801">- update to version 4.9.5
  * bmo#634793: define NSPR's exact-width integer types PRInt{N} and
    PRUint{N} types to match the &lt;stdint.h&gt; exact-width integer types
    int{N}_t and uint{N}_t.
  * bmo#782815: passing 'int *' to parameter of type 'unsigned int *'
    in setsockopt().
  * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR.
  * bmo#824742: NSPR shouldn't require librt on Android.
  * bmo#831793: data race on lib-&gt;refCount in PR_UnloadLibrary.</changelog>
<changelog author="wr@rosenauer.org" date="1363435200">- update to version 4.9.6
  * aarch64 support
    (removed obsolete aarch64-support.patch)
  * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883)
  * Auto detect android api version for x86 (bmo#782214)
  * Initialize Windows CRITICAL_SECTIONs without debug info and
    with nonzero spin count (bmo#812085)</changelog>
<changelog author="wr@rosenauer.org" date="1370779200">- update to version 4.10
  * bmo#844513: Add AddressSanitizer (ASan) memory check annotations to
    PLArena.
  * bmo#849089: Simple changes to make NSPR's configure.in work with
    the current version of autoconf.
  * bmo#856196: Fix compiler warnings and clean up code in NSPR 4.10.
  * bmo#859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
  * bmo#859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  * bmo#861434: Make PR_SetThreadPriority() change priorities
    relatively to the main process instead of using absolute values on
    Linux.
  * bmo#871064L: _PR_InitThreads() should not call PR_SetThreadPriority.</changelog>
<changelog author="wr@rosenauer.org" date="1379851200">- update to version 4.10.1
  * bmo#888273: RWIN Scaling (RFC1323) limited to 2 on Windows 7 and 8
    (Windows only)
  * bmo#907512: Unix platforms shouldn't mask errors specific to
    Unix domain sockets</changelog>
<changelog author="wr@rosenauer.org" date="1384171200">- update to version 4.10.2
  relevant changes
  * bmo#770534: possible pointer overflow in PL_ArenaAllocate()
  * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add ppc64le-support.patch:
  * add support for powerpc64le-linux</changelog>
<changelog author="wr@rosenauer.org" date="1391688000">- update to version 4.10.3
  * bmo#749849: ensure we'll free the thread-specific data key.
  * bmo#941461: don't compile android with unaligned memory access.
  * bmo#932398: Add PR_SyncMemMap, a portable version of
    msync/FlushViewOfFile.
  * bmo#952621: Fix a thread-unsafe access to lock-&gt;owner in PR_Lock.
  * bmo#957458: Fix several bugs in the lock rank checking code.
  * bmo#936320: Use an alternative test for IPv6 support on Linux to
    avoid opening a socket.</changelog>
<changelog author="pcerny@suse.com" date="1393588800">- update of the PowerPC 64 LE support patch
  (renamed ppc64le-support.patch to nspr-ppc64le.patch)</changelog>
<changelog author="ro@suse.de" date="1393848000">- drop patch config-guess-sub-update.diff
  config.guess and config.sub are updated by the ppc64le patch</changelog>
<changelog author="wr@rosenauer.org" date="1394452800">- update to version 4.10.4
  * bmo#767759: Add support for new x32 abi
  * bmo#844784: Thread data race in PR_EnterMonitor
  * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root
  * bmo#958796: Users of _beginthreadex that set a custom stack size
    may not be getting the behavior they want
  * bmo#963033: AArch64 support update for NSPR
  * bmo#969061:	Incorrect end-of-list test when iterating over a
    PRCList in prcountr.c and prtrace.c
  * bmo#971152: IPv6 detection on linux depends on availability of
    /proc/net/if_inet6</changelog>
<changelog author="wr@rosenauer.org" date="1399464000">- update to version 4.10.5
  * autoconf updates
  * PPC64LE support
- dropped obsolete nspr-ppc64le.patch</changelog>
<changelog author="wr@rosenauer.org" date="1402401600">- update to version 4.10.6 (bnc#881874)
  * requirement for Firefox 30
  * PR_GetPhysicalMemorySize should release the mach_host_self()
    Mach port when done with it (bmo#1009270)
  * "Network address type not supported" error on the Hurd (bmo#1011861)
  * Clang Static Analysis: useless declaration in NSPR (bmo#1003946)
  * OOB write with sprintf and console functions (bmo#1018783)
    (CVE-2014-1545)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 4.10.7
  * bmo#836658: VC11+ defaults to SSE2 builds by default.
  * bmo#979278: TSan: data race nsprpub/pr/src/threads/prtpd.c:103
    PR_NewThreadPrivateIndex.
  * bmo#1026129: Replace some manual declarations of MSVC intrinsics with
    [#]include &lt;intrin.h&gt;.
  * bmo#1026469: Use AC_CHECK_LIB instead of MOZ_CHECK_PTHREADS. Skip
    compiler checks when using MSVC, even when $CC is
    not literally "cl".
  * bmo#1034415: NSPR hardcodes the C compiler to cl on Windows.
  * bmo#1042408: Compilation fix for Android &gt; API level 19.
  * bmo#1043082: NSPR's build system hardcodes -MD.</changelog>
<changelog author="wr@rosenauer.org" date="1422532800">- update to version 4.10.8
  * bmo#573192: remove the stack-based PRFileDesc cache.
  * bmo#756047: check for _POSIX_THREAD_PRIORITY_SCHEDULING &gt; 0 instead
    of only checking if the identifier is defined.
  * bmo#782113: Add NSPR support for FreeBSD ppc/ppc64/arm.
  * bmo#782124: Implement PR_GetPhysicalMemorySize on FreeBSD/DragonFly.
  * bmo#1060292: Make PR_Assert() and PR_Abort() output visible in the
    logcat on Android.
  * bmo#1089908: Fix variable shadowing in _PR_MD_LOCKFILE. Use
    PR_ARRAY_SIZE to get the array size of _PR_RUNQ(t-&gt;cpu).
  * bmo#1105144: Two places in NSPR's pruthr.c cast a pointer to long,
    which isn't correct on 64-bit Windows.
  * bmo#1060401: change import library name under mingw.
  * bmo#1106600: Replace PR_ASSERT(!"foo") with PR_NOT_REACHED("foo") t
    fix clang -Wstring-conversion warnings.
  * bmo#1107063: link NSPR libs with -soname on OpenBSD.
  * bmo#1120772: Avoid defining snprintf when MSVC provides it.</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1440158400">- update to version 4.10.9
  * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal
  * bmo#1030692: Make compiling nspr on windows possible again.
  * bmo#1088790: dosprint() doesn't support %zu and other size formats
  * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++
    conformance) option
  * bmo#1153610: MIPS64: Add support for n64 ABI
  * bmo#1156029: Teach clang-analyzer about PR_ASSERT
  * bmo#1160125: MSVC version detection is broken CC is set to a wrapper
    (like sccache)
  * bmo#1163346: Add NSPR support for FreeBSD mips/mips64
  * bmo#1169185: Add support for OpenRISC (or1k)
  * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR
  * bmo#1174781: PR_GetInheritedFD can use uninitialized variables</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to version 4.10.10 (bnc#952810)
  * MFSA 2015-133/CVE-2015-7183 (bmo#1205157)
    memory corruption issues</changelog>

</package>
<package pkgid="1c6b20e05b1f5bff3df71d54d2045e2c96cc7e081ef03534a3ede4108275c614" name="mozilla-nspr-devel" arch="x86_64">
    <version epoch="0" ver="4.10.10" rel="4.1"/>

<changelog author="wr@rosenauer.org" date="1351166400">- update to version 4.9.3
  * bmo#749849: NSPR pthread_key_t leak and memory corruption.
  * bmo#794316: PR_PushIOLayer doesn't push layer on the top correctly
  * bmo#795213: clang's -Wtautological-constant-out-of-range-compare
    warns on prnetdb.c</changelog>
<changelog author="wr@rosenauer.org" date="1354276800">- update to version 4.9.4
  * bmo#757593: PR_IntervalNow not monotonic for Android, Linux,
    Mac OS X.
  * bmo#804806: Remove support for obsolete platforms (ncr, nec,
    sony, nextstep, sinix/reliantunix, and sunos4).
  * bmo#804833: Allow PR_FormatTime and PR_FormatTimeUSEnglish with
    NO_NSPR_10_SUPPORT. Fixed by Isaac Aggrey.</changelog>
<changelog author="dmueller@suse.com" date="1362052800">- Add config-guess-sub-update.diff:
  * update config.guess/sub for aarch64 support
- Add aarch64-support.patch:
  * add support for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1362052801">- update to version 4.9.5
  * bmo#634793: define NSPR's exact-width integer types PRInt{N} and
    PRUint{N} types to match the &lt;stdint.h&gt; exact-width integer types
    int{N}_t and uint{N}_t.
  * bmo#782815: passing 'int *' to parameter of type 'unsigned int *'
    in setsockopt().
  * bmo#822932: Port bmo#802527 (NDK r8b support for x86) to NSPR.
  * bmo#824742: NSPR shouldn't require librt on Android.
  * bmo#831793: data race on lib-&gt;refCount in PR_UnloadLibrary.</changelog>
<changelog author="wr@rosenauer.org" date="1363435200">- update to version 4.9.6
  * aarch64 support
    (removed obsolete aarch64-support.patch)
  * added PL_SizeOfArenaPoolExcludingPool function (bmo#807883)
  * Auto detect android api version for x86 (bmo#782214)
  * Initialize Windows CRITICAL_SECTIONs without debug info and
    with nonzero spin count (bmo#812085)</changelog>
<changelog author="wr@rosenauer.org" date="1370779200">- update to version 4.10
  * bmo#844513: Add AddressSanitizer (ASan) memory check annotations to
    PLArena.
  * bmo#849089: Simple changes to make NSPR's configure.in work with
    the current version of autoconf.
  * bmo#856196: Fix compiler warnings and clean up code in NSPR 4.10.
  * bmo#859066: Fix warning in nsprpub/pr/src/misc/prnetdb.c.
  * bmo#859830: Deprecate ANDROID_VERSION in favor of android/api-level.h.
  * bmo#861434: Make PR_SetThreadPriority() change priorities
    relatively to the main process instead of using absolute values on
    Linux.
  * bmo#871064L: _PR_InitThreads() should not call PR_SetThreadPriority.</changelog>
<changelog author="wr@rosenauer.org" date="1379851200">- update to version 4.10.1
  * bmo#888273: RWIN Scaling (RFC1323) limited to 2 on Windows 7 and 8
    (Windows only)
  * bmo#907512: Unix platforms shouldn't mask errors specific to
    Unix domain sockets</changelog>
<changelog author="wr@rosenauer.org" date="1384171200">- update to version 4.10.2
  relevant changes
  * bmo#770534: possible pointer overflow in PL_ArenaAllocate()
  * bmo#888546: ptio.c:PR_ImportUDPSocket doesn't work</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add ppc64le-support.patch:
  * add support for powerpc64le-linux</changelog>
<changelog author="wr@rosenauer.org" date="1391688000">- update to version 4.10.3
  * bmo#749849: ensure we'll free the thread-specific data key.
  * bmo#941461: don't compile android with unaligned memory access.
  * bmo#932398: Add PR_SyncMemMap, a portable version of
    msync/FlushViewOfFile.
  * bmo#952621: Fix a thread-unsafe access to lock-&gt;owner in PR_Lock.
  * bmo#957458: Fix several bugs in the lock rank checking code.
  * bmo#936320: Use an alternative test for IPv6 support on Linux to
    avoid opening a socket.</changelog>
<changelog author="pcerny@suse.com" date="1393588800">- update of the PowerPC 64 LE support patch
  (renamed ppc64le-support.patch to nspr-ppc64le.patch)</changelog>
<changelog author="ro@suse.de" date="1393848000">- drop patch config-guess-sub-update.diff
  config.guess and config.sub are updated by the ppc64le patch</changelog>
<changelog author="wr@rosenauer.org" date="1394452800">- update to version 4.10.4
  * bmo#767759: Add support for new x32 abi
  * bmo#844784: Thread data race in PR_EnterMonitor
  * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root
  * bmo#958796: Users of _beginthreadex that set a custom stack size
    may not be getting the behavior they want
  * bmo#963033: AArch64 support update for NSPR
  * bmo#969061:	Incorrect end-of-list test when iterating over a
    PRCList in prcountr.c and prtrace.c
  * bmo#971152: IPv6 detection on linux depends on availability of
    /proc/net/if_inet6</changelog>
<changelog author="wr@rosenauer.org" date="1399464000">- update to version 4.10.5
  * autoconf updates
  * PPC64LE support
- dropped obsolete nspr-ppc64le.patch</changelog>
<changelog author="wr@rosenauer.org" date="1402401600">- update to version 4.10.6 (bnc#881874)
  * requirement for Firefox 30
  * PR_GetPhysicalMemorySize should release the mach_host_self()
    Mach port when done with it (bmo#1009270)
  * "Network address type not supported" error on the Hurd (bmo#1011861)
  * Clang Static Analysis: useless declaration in NSPR (bmo#1003946)
  * OOB write with sprintf and console functions (bmo#1018783)
    (CVE-2014-1545)</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to version 4.10.7
  * bmo#836658: VC11+ defaults to SSE2 builds by default.
  * bmo#979278: TSan: data race nsprpub/pr/src/threads/prtpd.c:103
    PR_NewThreadPrivateIndex.
  * bmo#1026129: Replace some manual declarations of MSVC intrinsics with
    [#]include &lt;intrin.h&gt;.
  * bmo#1026469: Use AC_CHECK_LIB instead of MOZ_CHECK_PTHREADS. Skip
    compiler checks when using MSVC, even when $CC is
    not literally "cl".
  * bmo#1034415: NSPR hardcodes the C compiler to cl on Windows.
  * bmo#1042408: Compilation fix for Android &gt; API level 19.
  * bmo#1043082: NSPR's build system hardcodes -MD.</changelog>
<changelog author="wr@rosenauer.org" date="1422532800">- update to version 4.10.8
  * bmo#573192: remove the stack-based PRFileDesc cache.
  * bmo#756047: check for _POSIX_THREAD_PRIORITY_SCHEDULING &gt; 0 instead
    of only checking if the identifier is defined.
  * bmo#782113: Add NSPR support for FreeBSD ppc/ppc64/arm.
  * bmo#782124: Implement PR_GetPhysicalMemorySize on FreeBSD/DragonFly.
  * bmo#1060292: Make PR_Assert() and PR_Abort() output visible in the
    logcat on Android.
  * bmo#1089908: Fix variable shadowing in _PR_MD_LOCKFILE. Use
    PR_ARRAY_SIZE to get the array size of _PR_RUNQ(t-&gt;cpu).
  * bmo#1105144: Two places in NSPR's pruthr.c cast a pointer to long,
    which isn't correct on 64-bit Windows.
  * bmo#1060401: change import library name under mingw.
  * bmo#1106600: Replace PR_ASSERT(!"foo") with PR_NOT_REACHED("foo") t
    fix clang -Wstring-conversion warnings.
  * bmo#1107063: link NSPR libs with -soname on OpenBSD.
  * bmo#1120772: Avoid defining snprintf when MSVC provides it.</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1440158400">- update to version 4.10.9
  * bmo#1021167: Leak of |poll_list| on failure in _MW_PollInternal
  * bmo#1030692: Make compiling nspr on windows possible again.
  * bmo#1088790: dosprint() doesn't support %zu and other size formats
  * bmo#1130787: prtime.h does not compile with MSVC's /Za (ISO C/C++
    conformance) option
  * bmo#1153610: MIPS64: Add support for n64 ABI
  * bmo#1156029: Teach clang-analyzer about PR_ASSERT
  * bmo#1160125: MSVC version detection is broken CC is set to a wrapper
    (like sccache)
  * bmo#1163346: Add NSPR support for FreeBSD mips/mips64
  * bmo#1169185: Add support for OpenRISC (or1k)
  * bmo:1174749: Remove configure block for iOS that uses MACOS_SDK_DIR
  * bmo#1174781: PR_GetInheritedFD can use uninitialized variables</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to version 4.10.10 (bnc#952810)
  * MFSA 2015-133/CVE-2015-7183 (bmo#1205157)
    memory corruption issues</changelog>

</package>
<package pkgid="ac9eebb93f9a537a3006ec38e64155538c5fdca450c8fbf1596d12d963caaddc" name="mozilla-nss" arch="src">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="793545b5d6cdcb52e376f79980f3d6b0d1e2eec1fba28b7fd67e93f2f7333177" name="mozilla-nss" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="81b970442e5b527e111dab4a982805c7efee8fe6ac373a7c28c5c2167b8ad3e3" name="mozilla-nss-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="36647a9cd89fe82c8b01b1b26f52f55f9aa986cb04f62d80c9f0cd495f61d91b" name="mozilla-nss-certs" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="480bedab1fe3d2e0ebecc3031048b4875804de72ab9a75379d8becab31a26009" name="mozilla-nss-certs-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="6ce882273cba8bcf7ae286c8db2e5978bdd4b8323b6884fb48cad4d4db82aff9" name="mozilla-nss-certs-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="5afc0abb350f6775f5b7bcba668dfe6cf4464d19d8475b32a4d79160e5456f40" name="mozilla-nss-certs-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="34ce08e6ffc18edca58f5f31facc8129d15ebf2e9fd073524a71474b72eae194" name="mozilla-nss-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="b6bb3fc676114a45c695ff30829fa2994464fc0be0ec92a14e1759a4f4229627" name="mozilla-nss-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="5aa97213dcc273e13d829c07097e145eab607d6e30e55a0cfe719db5076404f6" name="mozilla-nss-debugsource" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="a63357ec27e09fdaacbcf35671a99fff7bc63e460d1481fbd9aabaf2ccd05ff4" name="mozilla-nss-devel" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="35920000e33edf3f9dc2d73c351ae11be0de5aa237fe6c3c12c0efb310db7e04" name="mozilla-nss-sysinit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="7ce5d553f6365859203a11beb44a3917054820b7dc8fea5ab698c5d42cd494ff" name="mozilla-nss-sysinit-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="2c28457e82bd78109c6c31e02171e1e5c33d6dc3d00c37af604b626d09daf98e" name="mozilla-nss-sysinit-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="f03ea036e6f7e3420b54a053bbc15378ec9640a51062279965d547b2836e2a75" name="mozilla-nss-sysinit-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="a21b54d46fa994c3bc406a0fe08cfc5df71bc231b3627f957aa4006cf6fccdec" name="mozilla-nss-tools" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="93eb23db95c8f41d9d6236052bbd02018101ee19ad103dc87906becd5a9018e3" name="mozilla-nss-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.20.1" rel="3.3"/>

<changelog author="wr@rosenauer.org" date="1395403200">- update to 3.16
  * required for Firefox 29
  * bmo#903885 - (CVE-2014-1492) In a wildcard certificate, the wildcard
    character should not be embedded within the U-label of an
    internationalized domain name. See the last bullet point in RFC 6125,
    Section 7.2.
  * Supports the Linux x32 ABI. To build for the Linux x32 target, set
    the environment variable USE_X32=1 when building NSS.
  New Functions:
  * NSS_CMSSignerInfo_Verify
  New Macros
  * TLS_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, etc.,
    cipher suites that were first defined in SSL 3.0 can now be referred
    to with their official IANA names in TLS, with the TLS_ prefix.
    Previously, they had to be referred to with their names in SSL 3.0,
    with the SSL_ prefix.
  Notable Changes:
  * ECC is enabled by default. It is no longer necessary to set the
    environment variable NSS_ENABLE_ECC=1 when building NSS. To disable
    ECC, set the environment variable NSS_DISABLE_ECC=1 when building NSS.
  * libpkix should not include the common name of CA as DNS names when
    evaluating name constraints.
  * AESKeyWrap_Decrypt should not return SECSuccess for invalid keys.
  * Fix a memory corruption in sec_pkcs12_new_asafe.
  * If the NSS_SDB_USE_CACHE environment variable is set, skip the runtime
    test sdb_measureAccess.
  * The built-in roots module has been updated to version 1.97, which
    adds, removes, and distrusts several certificates.
  * The atob utility has been improved to automatically ignore lines of
    text that aren't in base64 format.
  * The certutil utility has been improved to support creation of
    version 1 and version 2 certificates, in addition to the existing
    version 3 support.</changelog>
<changelog author="wr@rosenauer.org" date="1399550400">- update to 3.16.1
  * required for Firefox 31
  New functionality:
  * Added the "ECC" flag for modutil to select the module used for
    elliptic curve cryptography (ECC) operations.
  New Functions:
  * PK11_ExportDERPrivateKeyInfo/PK11_ExportPrivKeyInfo
    exports a private key in a DER-encoded ASN.1 PrivateKeyInfo type
    or a SECKEYPrivateKeyInfo structure. Only RSA private keys are
    supported now.
  * SECMOD_InternalToPubMechFlags
    converts from NSS-internal to public representation of mechanism
    flags
  New Types:
  * ssl_padding_xtn
    the value of this enum constant changed from the experimental
    value 35655 to the IANA-assigned value 21
  New Macros
  * PUBLIC_MECH_ECC_FLAG
    a public mechanism flag for elliptic curve cryptography (ECC)
    operations
  * SECMOD_ECC_FLAG
    an NSS-internal mechanism flag for elliptic curve cryptography
    (ECC) operations. This macro has the same numeric value as
    PUBLIC_MECH_ECC_FLAG.
  Notable Changes:
  * Imposed name constraints on the French government root CA ANSSI
    (DCISS).</changelog>
<changelog author="wr@rosenauer.org" date="1404561600">- update to 3.16.3
  * required for Firefox 32
  New Functions:
  * CERT_GetGeneralNameTypeFromString (This function was already added
    in NSS 3.16.2, however, it wasn't declared in a public header file.)
  Notable Changes:
  * The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - GTE CyberTrust Global Root
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  * Additionally, the following CA certificate was removed as
    requested by the CA:
  - TDC Internet Root CA
  * The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
  * The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- changes in 3.16.2
  New functionality:
  * DTLS 1.2 is supported.
  * The TLS application layer protocol negotiation (ALPN) extension
    is also supported on the server side.
  * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and
    PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism.
  * New Intel AES assembly code for 32-bit and 64-bit Windows,
    contributed by Shay Gueron and Vlad Krasnov of Intel.
  New Functions:
  * CERT_AddExtensionByOID
  * PK11_PrivDecrypt
  * PK11_PubEncrypt
  New Macros
  * SSL_ERROR_NEXT_PROTOCOL_NO_CALLBACK
  * SSL_ERROR_NEXT_PROTOCOL_NO_PROTOCOL
  Notable Changes:
  * The btoa command has a new command-line option -w suffix, which
    causes the output to be wrapped in BEGIN/END lines with the
    given suffix
  * The certutil commands supports additionals types of subject
    alt name extensions.
  * The certutil command supports generic certificate extensions,
    by loading binary data from files, which have been prepared using
    external tools, or which have been extracted from other existing
    certificates and dumped to file.
  * The certutil command supports three new certificate usage specifiers.
  * The pp command supports printing UTF-8 (-u).
  * On Linux, NSS is built with the -ffunction-sections -fdata-sections
    compiler flags and the --gc-sections linker flag to allow unused
    functions to be discarded.</changelog>
<changelog author="wr@rosenauer.org" date="1407844800">- update to 3.16.4 (bnc#894201)
  * now required for Firefox 32
  Notable Changes:
  * The following 1024-bit root CA certificate was restored to allow more
    time to develop a better transition strategy for affected sites. It was
    removed in NSS 3.16.3, but discussion in the mozilla.dev.security.policy
    forum led to the decision to keep this root included longer in order to
    give website administrators more time to update their web servers.
  - CN = GTE CyberTrust Global Root
  * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification
    Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit
    intermediate CA certificate has been included, without explicit trust.
    The intention is to mitigate the effects of the previous removal of the
    1024-bit Entrust.net root certificate, because many public Internet
    sites still use the "USERTrust Legacy Secure Server CA" intermediate
    certificate that is signed by the 1024-bit Entrust.net root certificate.
    The inclusion of the intermediate certificate is a temporary measure to
    allow those sites to function, by allowing them to find a trust path to
    another 2048-bit root CA certificate. The temporarily included
    intermediate certificate expires November 1, 2015.</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to 3.17
  * required for Firefox 33
  New functionality:
  * When using ECDHE, the TLS server code may be configured to generate
    a fresh ephemeral ECDH key for each handshake, by setting the
    SSL_REUSE_SERVER_ECDHE_KEY socket option to PR_FALSE. The
    SSL_REUSE_SERVER_ECDHE_KEY option defaults to PR_TRUE, which means
    the server's ephemeral ECDH key is reused for multiple handshakes.
    This option does not affect the TLS client code, which always
    generates a fresh ephemeral ECDH key for each handshake.
  New Macros
  * SSL_REUSE_SERVER_ECDHE_KEY
  Notable Changes:
  * The manual pages for the certutil and pp tools have been updated to
    document the new parameters that had been added in NSS 3.16.2.
  * On Windows, the new build variable USE_STATIC_RTL can be used to
    specify the static C runtime library should be used. By default the
    dynamic C runtime library is used.</changelog>
<changelog author="wr@rosenauer.org" date="1411473600">- update to 3.17.1 (bnc#897890)
  * MFSA 2014-73/CVE-2014-1568 (bmo#1064636, bmo#1069405)
    RSA Signature Forgery in NSS
  * Change library's signature algorithm default to SHA256
  * Add support for draft-ietf-tls-downgrade-scsv
  * Add clang-cl support to the NSS build system
  * Implement TLS 1.3:
  * Part 1. Negotiate TLS 1.3
  * Part 2. Remove deprecated cipher suites andcompression.
  * Add support for little-endian powerpc64</changelog>
<changelog author="wr@rosenauer.org" date="1413460800">- update to 3.17.2
  Bugfix release
  * bmo#1049435 - Importing an RSA private key fails if p &lt; q
  * bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
  * bmo#1078669 - certutil crashes when using the --certVersion parameter</changelog>
<changelog author="wr@rosenauer.org" date="1417867200">- update to 3.17.3
  New functionality:
  * Support for TLS_FALLBACK_SCSV has been added to the ssltap and
    tstclnt utilities
  Notable Changes:
  * The QuickDER decoder now decodes lengths robustly
    (CVE-2014-1569)
  * The following 1024-bit CA certificates were removed:
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Class 3 Public Primary Certification Authority - G2
  - Equifax Secure eBusiness CA-1
  * The following CA certificates were added:
  - COMODO RSA Certification Authority
  - USERTrust RSA Certification Authority
  - USERTrust ECC Certification Authority
  - GlobalSign ECC Root CA - R4
  - GlobalSign ECC Root CA - R5
  * the version number of the updated root CA list has been set
    to 2.2</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to 3.17.4
  * Firefox target release 36
  Notable Changes:
  * bmo#1084986: If an SSL/TLS connection fails, because client and
    server don't have any common protocol version enabled,
  NSS has been changed to report error code
  SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
  * bmo#1112461: libpkix was fixed to prefer the newest certificate,
    if multiple certificates match.
  * bmo#1094492: fixed a memory corruption issue during failure of
    keypair generation.
  * bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
    mode.
  * bmo#1119983: fixed interoperability of NSS server code with a
    LibreSSL client.</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to 3.18
  * Firefox target release 38
  New functionality:
  * When importing certificates and keys from a PKCS#12 source,
    it's now possible to override the nicknames, prior to importing
    them into the NSS database, using new API
    SEC_PKCS12DecoderRenameCertNicknames.
  * The tstclnt test utility program has new command-line options
  - C, -D, -b and -R.
    Use -C one, two or three times to print information about the
    certificates received from a server, and information about the
    locally found and trusted issuer certificates, to diagnose
    server side configuration issues. It is possible to run tstclnt
    without providing a database (-D). A PKCS#11 library that
    contains root CA certificates can be loaded by tstclnt, which
    may either be the nssckbi library provided by NSS (-b) or
    another compatible library (-R).
  New Functions:
  * SEC_CheckCrlTimes
  * SEC_GetCrlTimes
  * SEC_PKCS12DecoderRenameCertNicknames
  New Types:
  * SEC_PKCS12NicknameRenameCallback
  Notable Changes:
  * The highest TLS protocol version enabled by default has been
    increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
    protocol version enabled by default has been increased from
    DTLS 1.0 to DTLS 1.2.
  * The default key size used by certutil when creating an RSA key
    pair has been increased from 1024 bits to 2048 bits.
  * The following CA certificates had the Websites and Code Signing
    trust bits turned off:
  - Equifax Secure Certificate Authority
  - Equifax Secure Global eBusiness CA-1
  - TC TrustCenter Class 3 CA II
  * The following CA certificates were added:
  - Staat der Nederlanden Root CA - G3
  - Staat der Nederlanden EV Root CA
  - IdenTrust Commercial Root CA 1
  - IdenTrust Public Sector Root CA 1
  - S-TRUST Universal Root CA
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - CFCA EV ROOT
  * The version number of the updated root CA list has been set
    to 2.3
- add the changes file as source so the .src.rpm builds (used for
  fake build time)</changelog>
<changelog author="wr@rosenauer.org" date="1429790400">- update to 3.18.1
  * Firefox target release 38
  * No new functionality is introduced in this release.
  Notable Changes:
  * The following CA certificate had the Websites and Code Signing
    trust bits restored to their original state to allow more time
    to develop a better transition strategy for affected sites:
  - OU = Equifax Secure Certificate Authority
  * The following CA certificate was removed:
  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  * The following intermediate CA certificate has been added as
    actively distrusted because it was mis-used to issue certificates
    for domain names the holder did not own or control:
  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
  * The version number of the updated root CA list has been set
    to 2.4</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to 3.19
  * Firefox target release 39
  New functionality:
  * For some certificates, such as root CA certificates, that don't
    embed any constraints, NSS might impose additional constraints,
    such as name constraints. A new API has been added that allows
    to lookup imposed constraints.
  * It is possible to override the directory in which the NSS build
    system will look for the sqlite library.
  New Functions:
  * CERT_GetImposedNameConstraints
  Notable Changes:
  * The SSL 3 protocol has been disabled by default.
  * NSS now more strictly validates TLS extensions and will fail a
    handshake that contains malformed extensions.
  * Fixed a bug related to the ordering of TLS handshake messages.
  * In TLS 1.2 handshakes, NSS advertises support for the SHA512
    hash algorithm, in order to be compatible with TLS servers
    that use certificates with a SHA512 signature.</changelog>
<changelog author="wr@rosenauer.org" date="1433073600">- update to 3.19.1
  No new functionality is introduced in this release. This patch
  release includes a fix for the recently published logjam attack.
  Notable Changes:
  * The minimum strength of keys that libssl will accept for
    finite field algorithms (RSA, Diffie-Hellman, and DSA) have
    been increased to 1023 bits (bmo#1138554).
    (MFSA 2015-70/CVE-2015-4000)
  * NSS reports the bit length of keys more accurately.  Thus,
    the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
    functions could report smaller values for values that have
    leading zero values. This affects the key strength values that
    are reported by SSL_GetChannelInfo.
  * NSS incorrectly permits skipping of ServerKeyExchange
    (bmo#1086145) (MFSA 2015-71/CVE-2015-2721)</changelog>
<changelog author="wr@rosenauer.org" date="1435060800">- update to 3.19.2
  * required for Firefox 39.0
  * No new functionality is introduced in this release. This release
    addresses a backwards compatibility issue with the NSS 3.19.1
    release.
  * In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
    implementation (part of the softoken cryptographic module used
    by default by NSS) was willing to generate or use was increased
  - for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
    was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
    Applications that requested or attempted to use keys smaller
    then the minimum size would fail. However,  this change in behaviour
    unintentionally broke existing NSS applications that need to
    generate or use such keys, via APIs such as
    SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.</changelog>
<changelog author="meissner@suse.com" date="1435147200">- as the .chk files are contained in libfreebl3 and libsoftokn
  directly, provide the -hmac alias names to help :42 building.</changelog>
<changelog author="fstrba@suse.com" date="1443096000">- Install blapi.h and algmac.h that are needed in order to build
  Sun elliptical curves provider in Java 7</changelog>
<changelog author="wr@rosenauer.org" date="1443096001">- update to NSS 3.19.3; certstore updates only
  * The following CA certificates were removed
  - Buypass Class 3 CA 1
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  - SG TRUST SERVICES RACINE
  - TC TrustCenter Universal CA I
  - TC TrustCenter Class 2 CA II
  * The following CA certificate had the Websites trust bit turned off
  - ComSign Secured CA
  * The following CA certificates were added
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
  - TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  - Certinomis - Root CA
  * The version number of the updated root CA list has been set to 2.5</changelog>
<changelog author="wr@rosenauer.org" date="1443096002">- update to NSS 3.20
  New functionality:
  * The TLS library has been extended to support DHE ciphersuites in
    server applications.
  New Functions:
  * SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
    parameters that can be used by NSS for a server socket.
  * SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
    parameters that are smaller than the library default's minimum size.
  New Types:
  * SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
    NSS that can be used with function SSL_DHEGroupPrefSet.
  New Macros:
  * SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
    DHE ciphersuites for a server socket.
  Notable Changes:
  * For backwards compatibility reasons, the server side implementation
    of the TLS library keeps all DHE ciphersuites disabled by default.
    They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
    and the SSL_OptionSet or the SSL_OptionSetDefault API.
  * The server side implementation of the TLS implementation does not
    support session tickets when using a DHE ciphersuite (see bmo#1174677).
  * Support for the following ciphersuites has been added:
  - TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
  - TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
  - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
  * By default, the server side TLS implementation will use DHE
    parameters with a size of 2048 bits when using DHE ciphersuites.
  * NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
    8192 bits, which were copied from version 08 of the Internet-Draft
    "Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
    TLS", Appendix A.
  * A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
    server application to select one or multiple of the embedded DHE
    parameters as the preferred parameters. The current implementation of
    NSS will always use the first entry in the array that is passed as a
    parameter to the SSL_DHEGroupPrefSet API. In future versions of the
    TLS implementation, a TLS client might signal a preference for
    certain DHE parameters, and the NSS TLS server side implementation
    might select a matching entry from the set of parameters that have
    been configured as preferred on the server side.
  * NSS optionally supports the use of weak DHE parameters with DHE
    ciphersuites to support legacy clients. In order to enable this
    support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
    time this API is called for the first time in a process, a fresh set
    of weak DHE parameters will be randomly created, which may take a
    long amount of time. Please refer to the comments in the header file
    that declares the SSL_EnableWeakDHEPrimeGroup API for additional
    details.
  * The size of the default PQG parameters used by certutil when
    creating DSA keys has been increased to use 2048 bit parameters.
  * The selfserv utility has been enhanced to support the new DHE features.
  * NSS no longer supports C compilers that predate the ANSI C standard (C89).</changelog>
<changelog author="fstrba@suse.com" date="1443096003">- Install the static libfreebl.a that is needed in order to link
  Sun elliptical curves provider in Java 7.</changelog>
<changelog author="wr@rosenauer.org" date="1445774400">- update to NSS 4.20.1 (bnc#952810)
  * requires NSPR 4.10.10
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
    memory corruption issues</changelog>

</package>
<package pkgid="d17a35864b234dd48dabe168498cc7f34d9a0cb4e176209c6d9f14d9382c738c" name="nano-plugin-conky" arch="x86_64">
    <version epoch="0" ver="1.10.0" rel="3.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1241352000">- update to 1.7.0</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244548800">- update to 1.7.1</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244894400">- update to 1.7.1.1:
  * fixed a regression which causes fonts to not be rendered properly with
    certain types of windows
  * fix bug in comments within TEXT (where the line contains just '#') (sf.net
    [#2803586])
  * fix bug in $mails (sf.net #2802529)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1254312000">- update to 1.7.2:
  * fixed minor memleak in pop3/imap code on config reload
  * fix crash when using $if_match with objects that may return a null pointer
    (like $rss, $weather, or $curl before data is available)
  * removed alias config option due to brokenness
  * changed xoap parsing method to xpath, in preparation to include forecast
    data
  * update MPD elapsed/progress when stopped (sf.net #2792113)
  * overhauled RSS and weather, added $curl
  * added support for X alignment across multi-lined objects (i.e., using
    $alignr with $exec)
  * www.weather.com can now be used as well as a source of weather dataµ
  * added support for $desktop, $desktop_number and $desktop_name (sf.net
    [#2040528])
  * added support for $swapfree
  * improved Lua API (lua_read_parse has been removed in favour of the
    conky_parse() Lua API call)
  * introduced new Lua Cairo and Imlib2 bindings
  * added support for $weather (experimental)
  * remove newline with comment only lines in TEXT
  * improved parsing of graph arguments, removed "log"|"normal" arguments in
    favour of -l switch
  * fix escaping of comments in TEXT (sf.net #2813390)
  * fix segfault in to_real_path, it's sometimes called with the same source
    and dest without checking the length, causing a segfault
  * use the internal process list for if_running on Linux</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1278244800">- update to 1.8.0
- split out -doc subpackage
- package vim and nano syntax highlighting configuration files into subpackages
  (instead of packaging them under the docdir)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1286539200">- dropped conky-getaddrinfo.patch, was merged upstream
  (PATCH-FIX-OPENSUSE conky-getaddrinfo.patch fix-for-opensuse-specific-things.patch sf#3045085 pascal.bleser@opensuse.org)
- update to 1.8.1:
  * allow method to pass execgraph arguments containing spaces
  * abort curl transfers if they drop below 1000B/s for more than 60s
  * fix short_units for below kilo values
  * when we have a failure in mail thread, sleep for a bit
  * improve failure handling in mail threads
  * when we have a failure in the mail thread, lookup the hostname again in
    case the failure is due odd to DNS changes, or some other madness
  * fix segfault in ccurl_thread.c
  * fix crash in mail stuff due to bad free()
  * fix segfault in i8k (sf.net #3007167)
  * use getaddrinfo instead of gethostbyname: patches conky to use getaddrinfo
    instead of gethostbyname everywhere. gethostbyname is rather flawed and
    doesn't support IPv6 properly. Patch contributed by Pascal Bleser.
  * fix 'nvidia with ncurses segfaults' (sf.net #3006233)
  * make $fs_used_perc and $fs_bar report used space correctly; they reported
    fs-&gt;size - fs-&gt;avail, which is not correct if fs has super-user reserved
    blocks; note that now $fs_used_perc and $fs_free_perc need not add up to
    100%, but that is consistent with what $fs_used and $fs_free do
  * fix buffer overflows in eve.c (sf.net #3034056)
  * fix bug where IMAP doesn't refresh counts after IDLE timeout
  * fix segfault in mail folder (SF: 3007493)
  * fix alignment ($align[rc]) issue for exec &amp; lua objects
  * small build fix &amp; zero playtime and progress bars when XMMS2 playback is stopped
  * fix tiny memleak when $top is used wrong
  * ${top}, ${top_mem} and ${top_time} are now recognized as variables; the
    parts of code doing this were in a #ifdef __linux__; the total CPU time of
    processes (${top} with "time" argument) is now printable, and ${top_time}
    works
  * fix battery_bar not parsing arguments correctly (sf: #2998034, lp: #569195)
  * bugfix: RSS interval was in secs instead of mins
  * bugfix: $alignr only worked on the first line of $execp, $execpi, $lua and $lua_parse
  * bugfix: memory and thread-deleting problems
  * bugfix: read_tcp treated a succesfull connection as failed and vice versa
  * add $nodename_short
  * bugfix: adding/removing use_xft in the config had no effect unless you
    restarted conky, reloading the config was not enough
  * fix building with Audacious &gt;= 2.3
  * bugfix: mixerbar showed wrong values
  * bugfix: ac-adapter is sometimes called ADP1 in sysfs instead of AC
  * bugfix: battery_bar should also work without argument
  * bugfix: When the first line behind TEXT was a comment, the start of the
    second line wasn't parsed
  * fix X error when border_width is &lt;1
  * fix device name parsing for diskio variables
  * fix bug in $if_existing</changelog>
<changelog author="nmarques@opensuse.org" date="1317038400">- Add conky-fix-curl-FTBFS.patch: remove deprecated curl/types.h
  to fix FTBFS with newer versions of curl.
  Upstream: http://tinyurl.com/4x76bbx</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317038401">- fix build issue with files in conky-doc</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317297600">- add cairo and imlib support where tolua++ is available,
  built as subpackages (conky-cairo and conky-imlib2)
- add patch to add -lm when linking against libiw, which is required by some
  more recent versions of libiw</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="coolo@suse.com" date="1327924800">- use lua51 on factory</changelog>
<changelog author="cfarrell@suse.com" date="1330516800">- license update: GPL-3.0+
  See the COPYING file</changelog>
<changelog author="toganm@opensuse.org" date="1340280000">- Update to 1.9.0 for changes please see
  http://conky.sourceforge.net/changelog.html
  * reworked conky-libiw_with_libm.patch as conky-1.9.0-libiw_with_libm.patch
  * removed conky-fix-curl-FTBFS.patch as fixed by upstream</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>

</package>
<package pkgid="220b0dc01bbfd3e0bd009dadd79da2bbdfbac223f199beb59ce48de3e35433a5" name="nodejs" arch="src">
    <version epoch="0" ver="4.2.1" rel="6.1"/>

<changelog author="i@marguerite.su" date="1399032000">- update version 0.10.27
  * npm: upgrade to v1.4.8
  * openssl: upgrade to 1.0.1g
  * uv: update to v0.10.27
  * dns: fix certain txt entries (Fedor Indutny)
  * assert: Ensure reflexivity of deepEqual (Mike Pennisi)
  * child_process: fix deadlock when sending handles (Fedor Indutny)
  * child_process: fix sending handle twice (Fedor Indutny)
  * crypto: do not lowercase cipher/hash names (Fedor Indutny)
  * dtrace: workaround linker bug on FreeBSD (Fedor Indutny)
  * http: do not emit EOF non-readable socket (Fedor Indutny)
  * http: invoke createConnection when no agent (Nathan Rajlich)
  * stream: remove useless check (Brian White)
  * timer: don't reschedule timer bucket in a domain (Greg Brail)
  * url: treat \ the same as / (isaacs)
  * util: format as Error if instanceof Error (Rod Vagg)
- add macros.nodejs</changelog>
<changelog author="nikolai@prokoschenko.de" date="1401278400">- fixes
  * initialization of the next build step was missing in case original node
    headers were to be used in node-gyp</changelog>
<changelog author="i@marguerite.su" date="1405684800">- fix changelog chronologically</changelog>
<changelog author="i@marguerite.su" date="1405684801">- update version 0.10.29
  * openssl: to 1.0.1h (CVE-2014-0224)
  * npm: upgrade to 1.4.10
  * utf8: Prevent Node from sending invalid UTF-8 (Felix Geisendörfer)
  * NOTE* this introduces a breaking change, previously you could construct
    invalid UTF-8 and invoke an error in a client that was expecting valid
    UTF-8, now unmatched surrogate pairs are replaced with the unknown UTF-8
    character. To restore the old functionality simply have NODE_INVALID_UTF8
    environment variable set.
  * child_process: do not set args before throwing (Greg Sabia Tucker)
  * child_process: spawn() does not throw TypeError (Greg Sabia Tucker)
  * constants: export O_NONBLOCK (Fedor Indutny)
  * crypto: improve memory usage (Alexis Campailla)
  * fs: close file if fstat() fails in readFile() (cjihrig)
  * lib: name EventEmitter prototype methods (Ben Noordhuis)
  * tls: fix performance issue (Alexis Campailla)</changelog>
<changelog author="i@marguerite.su" date="1406635200">- fix a typo in macros.nodejs
- explicitly use /usr/lib, %%{_libexecdir} will resolve to
  /usr/lib64 on sles x86_64 versions.</changelog>
<changelog author="javier@opensuse.org" date="1408190400">- Update to version 0.10.30
  * uv: Upgrade to v0.10.28
  * npm: Upgrade to v1.4.21
  * v8: Interrupts must not mask stack overflow.
  * Revert "stream: start old-mode read in a next tick" (Fedor Indutny)
  * buffer: fix sign overflow in `readUIn32BE` (Fedor Indutny)
  * buffer: improve {read,write}{U}Int* methods (Nick Apperson)
  * child_process: handle writeUtf8String error (Fedor Indutny)
  * deps: backport 4ed5fde4f from v8 upstream (Fedor Indutny)
  * deps: cherry-pick eca441b2 from OpenSSL (Fedor Indutny)
  * lib: remove and restructure calls to isNaN() (cjihrig)
  * module: eliminate double `getenv()` (Maciej Małecki)
  * stream2: flush extant data on read of ended stream (Chris Dickinson)
  * streams: remove unused require('assert') (Rod Vagg)
  * timers: backport f8193ab (Julien Gilli)
  * util.h: interface compatibility (Oguz Bastemur)
  * zlib: do not crash on write after close (Fedor Indutny)</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 0.10.31
  * v8: backport CVE-2013-6668
  * openssl: Update to v1.0.1i
  * npm: Update to v1.4.23
  * cluster: disconnect should not be synchronous
  * fs: fix fs.readFileSync fd leak when get RangeError
  * stream: fix Readable.wrap objectMode falsy values
  * timers: fix timers with non-integer delay hanging</changelog>
<changelog author="i@marguerite.su" date="1408795200">- workaround for sles</changelog>
<changelog author="jgleissner@suse.com" date="1410350400">- do not install NPM
- use /usr/lib/node_modules instead of /usr/lib64/node_modules even
  on x86_64 (node modules are not binary)
- drop patch: nodejs-lib64path.patch and nodejs-libpath.patch
  * installing in /usr/lib64 doesn't really make sense for non-binary files
- drop patch: node-gyp-addon-gypi.patch and
  nodejs-add_missing_shebang_to_read-package-json.patch
  * they were patching npm files, which is separate now</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 0.10.32
  * v8: fix a crash introduced by previous release
  * configure: add --openssl-no-asm flag
  * crypto: use domains for any callback-taking method
  * http: do not send `0\r\n\r\n` in TE HEAD responses
  * querystring: fix unescape override
  * url: Add support for RFC 3490 separators</changelog>
<changelog author="jgleissner@suse.com" date="1412856000">- removed macros.nodejs (moved to nodejs-packaging)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1421841600">- Add three arches to ExclusiveArch: ppc ppc64 ppc64le
- Add nodejs-v0.10.32-release-ppc.patch.bz2 for them
  (required as PowerPC support not yet upstream)
  (the patch header details how it is created)
- do not configure --with-gdb for those architectures</changelog>
<changelog author="i@marguerite.su" date="1425211200">- update version 0.12.0
  * npm: upgrade to 2.5.1
  * mdb_v8: update for v0.12
- drop nodejs-v0.10.32-release-ppc.patch.bz2
- add nodejs-v0.12.0-release-ppc.patch.bz2
- add README.SUSE.PowerPC to explain how to generate ppc patch</changelog>
<changelog author="dmacvicar@suse.de" date="1426766400">- enable s390x</changelog>
<changelog author="dmueller@suse.com" date="1428062400">- enable aarch64
- add support-arm64-build.patch</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 0.12.4
  * npm: upgrade to 2.10.1
  * V8: revert v8 Array.prototype.values() removal
  * win: bring back xp/2k3 support
- previous changes from 0.12.1 to 0.12.3 see ChangeLog</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 0.12.5
  * openssl: upgrade to 1.0.1o
  * npm: upgrade to 2.11.2
  * uv: upgrade to 1.6.1
  * V8: avoid deadlock when profiling is active
  * install: fix source path for openssl headers
  * install: make sure opensslconf.h is overwritten
  * timers: fix timeout when added in timer's callback
- add patch: node-gcc5.patch
  * fix gcc 5 version detection</changelog>
<changelog author="i@marguerite.su" date="1437825600">- build with bundled npm</changelog>
<changelog author="i@marguerite.su" date="1438171200">- update version 0.12.7
  * openssl: upgrade to 1.0.1p
  * npm: upgrade to 2.11.3
  * v8: cherry-pick JitCodeEvent patch from upstream
- changes in 0.12.6
  * v8: fix out-of-band write in utf8 decoder
  * fix boo#937414: CVE-2015-5380: nodejs: out of band write</changelog>
<changelog author="i@marguerite.su" date="1445169600">- fixed boo#948602/CVE-2015-7384:
  * nodejs: HTTP Denial of Service Vulnerability
- install missing addon-rpm.gypi (boo#948045)
- update to 4.2.1
  * Includes fixes for two regressions
    + Assertion error in WeakCallback
    + Undefined timeout regression
- changes in 4.2.0
  * icu: Updated to version 56 with significant performance
    improvements
  * node:
    + Added new -c (or --check) command line argument for checking
    script syntax without executing the code
    + Added process.versions.icu to hold the current ICU library
    version
    + Added process.release.lts to hold the current LTS codename
    when the binary is from an active LTS release line
  * npm: Upgraded to npm 2.14.7 from 2.14.4
- changes in 4.1.2
  * http:
    + Fix out-of-order 'finish' event bug in pipelining that can
    abort execution, fixes DoS vulnerability CVE-2015-7384
    + Account for pending response data instead of just the data
    on the current request to decide whether pause the socket
    or not
    + libuv: Upgraded from v1.7.4 to v1.7.5
    + Improved AIX support
  * v8:
    + Upgraded from v4.5.103.33 to v4.5.103.35
    + Backported f782159 from v8's upstream to help speed up Promise
    introspection
    + Backported c281c15 from v8's upstream to add JSTypedArray
    length in post-mortem metadata
- changes in 4.1.1
  * buffer: Fixed a bug introduced in v4.1.0 where allocating a new
    zero-length buffer can result in the next allocation of a
    TypedArray in JavaScript not being zero-filled. In certain
    circumstances this could result in data leakage via reuse of
    memory space in TypedArrays, breaking the normally safe assumption
    that TypedArrays should be always zero-filled.
  * http: Guard against response-splitting of HTTP trailing headers
    added via response.addTrailers() by removing new-line ([\r\n])
    characters from values. Note that standard header values are
    already stripped of new-line characters. The expected security
    impact is low because trailing headers are rarely used.
  * npm:
    + Upgrade to npm 2.14.4 from 2.14.3
    + Upgrades graceful-fs on multiple dependencies to no longer
    rely on monkey-patching fs
    + Fix npm link for pre-release / RC builds of Node
  * v8:
    + Update post-mortem metadata to allow post-mortem debugging
    tools to find and inspect:
    + JavaScript objects that use dictionary properties ScopeInfo
    and thus closures
- changes in 4.1.0
  * buffer:
    + Buffers are now created in JavaScript, rather than C++.
    This increases the speed of buffer creation
    + Buffer#slice() now uses Uint8Array#subarray() internally,
    increasing slice() performance
  * fs:
    + fs.utimes() now properly converts numeric strings, NaN,
    and Infinity
    + fs.WriteStream now implements _writev, allowing for
    super-fast bulk writes
  * http: Fixed an issue with certain write() sizes causing errors
    when using http.request()
  * npm: Upgrade to version 2.14.3
  * src: V8 cpu profiling no longer erroneously shows idle time
  * timers: #ref() and #unref() now return the timer they belong to
  * v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor
    fixes. This fixes a previously known bug where some computed
    object shorthand properties did not work correctly.
- changes in 4.0.0
  * child_process: ChildProcess.prototype.send() and process.send()
    operate asynchronously across all platforms so an optional
    callback parameter has been introduced that will be invoked once
    the message has been sent.
  * node: Rename "io.js" code to "Node.js".
  * node-gyp: This release bundles an updated version of node-gyp
    that works with all versions of Node.js and io.js including
    nightly and release candidate builds. From io.js v3 and Node.js
    v4 onward, it will only download a headers tarball when building
    addons rather than the entire source.
  * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security
    update.
  * timers: Improved timer performance from porting the 0.12
    implementation, plus minor fixes.
  * util: The util.is*() functions have been deprecated, beginning
    with deprecation warnings in the documentation for this release,
    users are encouraged to seek more robust alternatives in the
    npm registry.
  * v8: Upgrade to version 4.5.103.30 from 4.4.63.30
    + Implement new TypedArray prototype methods: copyWithin(),
    every(), fill(), filter(), find(), findIndex(), forEach(),
    indexOf(), join(), lastIndexOf(), map(), reduce(),
    reduceRight(), reverse(), slice(), some(), sort().
    + Implement new TypedArray.from() and TypedArray.of() functions.
    + Implement arrow functions
- drop nodejs-openssl-missing-api.patch: it's for 0.9.8.
- ppc/ppc64(le) is natively supported since nodejs 3.0.0.
  so drop nodejs-v0.12.7-release-ppc.patch.bz2
- drop node-gcc5.patch, upstream fixed
- add nodejs-lib64path.patch, adjust libdir
- add nodejs-libpath.patch, adjust libdir
- add node-gyp-addon-gypi.patch
  * use custom addon.gypi by default instead of downloading
    node source
- add node_modules clean up codes</changelog>

</package>
<package pkgid="c7f27c1b0bb9d3b9cec018cd3658cec0fe30cdddb4da42b0beda6c0801670cfd" name="nodejs" arch="x86_64">
    <version epoch="0" ver="4.2.1" rel="6.1"/>

<changelog author="i@marguerite.su" date="1399032000">- update version 0.10.27
  * npm: upgrade to v1.4.8
  * openssl: upgrade to 1.0.1g
  * uv: update to v0.10.27
  * dns: fix certain txt entries (Fedor Indutny)
  * assert: Ensure reflexivity of deepEqual (Mike Pennisi)
  * child_process: fix deadlock when sending handles (Fedor Indutny)
  * child_process: fix sending handle twice (Fedor Indutny)
  * crypto: do not lowercase cipher/hash names (Fedor Indutny)
  * dtrace: workaround linker bug on FreeBSD (Fedor Indutny)
  * http: do not emit EOF non-readable socket (Fedor Indutny)
  * http: invoke createConnection when no agent (Nathan Rajlich)
  * stream: remove useless check (Brian White)
  * timer: don't reschedule timer bucket in a domain (Greg Brail)
  * url: treat \ the same as / (isaacs)
  * util: format as Error if instanceof Error (Rod Vagg)
- add macros.nodejs</changelog>
<changelog author="nikolai@prokoschenko.de" date="1401278400">- fixes
  * initialization of the next build step was missing in case original node
    headers were to be used in node-gyp</changelog>
<changelog author="i@marguerite.su" date="1405684800">- fix changelog chronologically</changelog>
<changelog author="i@marguerite.su" date="1405684801">- update version 0.10.29
  * openssl: to 1.0.1h (CVE-2014-0224)
  * npm: upgrade to 1.4.10
  * utf8: Prevent Node from sending invalid UTF-8 (Felix Geisendörfer)
  * NOTE* this introduces a breaking change, previously you could construct
    invalid UTF-8 and invoke an error in a client that was expecting valid
    UTF-8, now unmatched surrogate pairs are replaced with the unknown UTF-8
    character. To restore the old functionality simply have NODE_INVALID_UTF8
    environment variable set.
  * child_process: do not set args before throwing (Greg Sabia Tucker)
  * child_process: spawn() does not throw TypeError (Greg Sabia Tucker)
  * constants: export O_NONBLOCK (Fedor Indutny)
  * crypto: improve memory usage (Alexis Campailla)
  * fs: close file if fstat() fails in readFile() (cjihrig)
  * lib: name EventEmitter prototype methods (Ben Noordhuis)
  * tls: fix performance issue (Alexis Campailla)</changelog>
<changelog author="i@marguerite.su" date="1406635200">- fix a typo in macros.nodejs
- explicitly use /usr/lib, %%{_libexecdir} will resolve to
  /usr/lib64 on sles x86_64 versions.</changelog>
<changelog author="javier@opensuse.org" date="1408190400">- Update to version 0.10.30
  * uv: Upgrade to v0.10.28
  * npm: Upgrade to v1.4.21
  * v8: Interrupts must not mask stack overflow.
  * Revert "stream: start old-mode read in a next tick" (Fedor Indutny)
  * buffer: fix sign overflow in `readUIn32BE` (Fedor Indutny)
  * buffer: improve {read,write}{U}Int* methods (Nick Apperson)
  * child_process: handle writeUtf8String error (Fedor Indutny)
  * deps: backport 4ed5fde4f from v8 upstream (Fedor Indutny)
  * deps: cherry-pick eca441b2 from OpenSSL (Fedor Indutny)
  * lib: remove and restructure calls to isNaN() (cjihrig)
  * module: eliminate double `getenv()` (Maciej Małecki)
  * stream2: flush extant data on read of ended stream (Chris Dickinson)
  * streams: remove unused require('assert') (Rod Vagg)
  * timers: backport f8193ab (Julien Gilli)
  * util.h: interface compatibility (Oguz Bastemur)
  * zlib: do not crash on write after close (Fedor Indutny)</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 0.10.31
  * v8: backport CVE-2013-6668
  * openssl: Update to v1.0.1i
  * npm: Update to v1.4.23
  * cluster: disconnect should not be synchronous
  * fs: fix fs.readFileSync fd leak when get RangeError
  * stream: fix Readable.wrap objectMode falsy values
  * timers: fix timers with non-integer delay hanging</changelog>
<changelog author="i@marguerite.su" date="1408795200">- workaround for sles</changelog>
<changelog author="jgleissner@suse.com" date="1410350400">- do not install NPM
- use /usr/lib/node_modules instead of /usr/lib64/node_modules even
  on x86_64 (node modules are not binary)
- drop patch: nodejs-lib64path.patch and nodejs-libpath.patch
  * installing in /usr/lib64 doesn't really make sense for non-binary files
- drop patch: node-gyp-addon-gypi.patch and
  nodejs-add_missing_shebang_to_read-package-json.patch
  * they were patching npm files, which is separate now</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 0.10.32
  * v8: fix a crash introduced by previous release
  * configure: add --openssl-no-asm flag
  * crypto: use domains for any callback-taking method
  * http: do not send `0\r\n\r\n` in TE HEAD responses
  * querystring: fix unescape override
  * url: Add support for RFC 3490 separators</changelog>
<changelog author="jgleissner@suse.com" date="1412856000">- removed macros.nodejs (moved to nodejs-packaging)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1421841600">- Add three arches to ExclusiveArch: ppc ppc64 ppc64le
- Add nodejs-v0.10.32-release-ppc.patch.bz2 for them
  (required as PowerPC support not yet upstream)
  (the patch header details how it is created)
- do not configure --with-gdb for those architectures</changelog>
<changelog author="i@marguerite.su" date="1425211200">- update version 0.12.0
  * npm: upgrade to 2.5.1
  * mdb_v8: update for v0.12
- drop nodejs-v0.10.32-release-ppc.patch.bz2
- add nodejs-v0.12.0-release-ppc.patch.bz2
- add README.SUSE.PowerPC to explain how to generate ppc patch</changelog>
<changelog author="dmacvicar@suse.de" date="1426766400">- enable s390x</changelog>
<changelog author="dmueller@suse.com" date="1428062400">- enable aarch64
- add support-arm64-build.patch</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 0.12.4
  * npm: upgrade to 2.10.1
  * V8: revert v8 Array.prototype.values() removal
  * win: bring back xp/2k3 support
- previous changes from 0.12.1 to 0.12.3 see ChangeLog</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 0.12.5
  * openssl: upgrade to 1.0.1o
  * npm: upgrade to 2.11.2
  * uv: upgrade to 1.6.1
  * V8: avoid deadlock when profiling is active
  * install: fix source path for openssl headers
  * install: make sure opensslconf.h is overwritten
  * timers: fix timeout when added in timer's callback
- add patch: node-gcc5.patch
  * fix gcc 5 version detection</changelog>
<changelog author="i@marguerite.su" date="1437825600">- build with bundled npm</changelog>
<changelog author="i@marguerite.su" date="1438171200">- update version 0.12.7
  * openssl: upgrade to 1.0.1p
  * npm: upgrade to 2.11.3
  * v8: cherry-pick JitCodeEvent patch from upstream
- changes in 0.12.6
  * v8: fix out-of-band write in utf8 decoder
  * fix boo#937414: CVE-2015-5380: nodejs: out of band write</changelog>
<changelog author="i@marguerite.su" date="1445169600">- fixed boo#948602/CVE-2015-7384:
  * nodejs: HTTP Denial of Service Vulnerability
- install missing addon-rpm.gypi (boo#948045)
- update to 4.2.1
  * Includes fixes for two regressions
    + Assertion error in WeakCallback
    + Undefined timeout regression
- changes in 4.2.0
  * icu: Updated to version 56 with significant performance
    improvements
  * node:
    + Added new -c (or --check) command line argument for checking
    script syntax without executing the code
    + Added process.versions.icu to hold the current ICU library
    version
    + Added process.release.lts to hold the current LTS codename
    when the binary is from an active LTS release line
  * npm: Upgraded to npm 2.14.7 from 2.14.4
- changes in 4.1.2
  * http:
    + Fix out-of-order 'finish' event bug in pipelining that can
    abort execution, fixes DoS vulnerability CVE-2015-7384
    + Account for pending response data instead of just the data
    on the current request to decide whether pause the socket
    or not
    + libuv: Upgraded from v1.7.4 to v1.7.5
    + Improved AIX support
  * v8:
    + Upgraded from v4.5.103.33 to v4.5.103.35
    + Backported f782159 from v8's upstream to help speed up Promise
    introspection
    + Backported c281c15 from v8's upstream to add JSTypedArray
    length in post-mortem metadata
- changes in 4.1.1
  * buffer: Fixed a bug introduced in v4.1.0 where allocating a new
    zero-length buffer can result in the next allocation of a
    TypedArray in JavaScript not being zero-filled. In certain
    circumstances this could result in data leakage via reuse of
    memory space in TypedArrays, breaking the normally safe assumption
    that TypedArrays should be always zero-filled.
  * http: Guard against response-splitting of HTTP trailing headers
    added via response.addTrailers() by removing new-line ([\r\n])
    characters from values. Note that standard header values are
    already stripped of new-line characters. The expected security
    impact is low because trailing headers are rarely used.
  * npm:
    + Upgrade to npm 2.14.4 from 2.14.3
    + Upgrades graceful-fs on multiple dependencies to no longer
    rely on monkey-patching fs
    + Fix npm link for pre-release / RC builds of Node
  * v8:
    + Update post-mortem metadata to allow post-mortem debugging
    tools to find and inspect:
    + JavaScript objects that use dictionary properties ScopeInfo
    and thus closures
- changes in 4.1.0
  * buffer:
    + Buffers are now created in JavaScript, rather than C++.
    This increases the speed of buffer creation
    + Buffer#slice() now uses Uint8Array#subarray() internally,
    increasing slice() performance
  * fs:
    + fs.utimes() now properly converts numeric strings, NaN,
    and Infinity
    + fs.WriteStream now implements _writev, allowing for
    super-fast bulk writes
  * http: Fixed an issue with certain write() sizes causing errors
    when using http.request()
  * npm: Upgrade to version 2.14.3
  * src: V8 cpu profiling no longer erroneously shows idle time
  * timers: #ref() and #unref() now return the timer they belong to
  * v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor
    fixes. This fixes a previously known bug where some computed
    object shorthand properties did not work correctly.
- changes in 4.0.0
  * child_process: ChildProcess.prototype.send() and process.send()
    operate asynchronously across all platforms so an optional
    callback parameter has been introduced that will be invoked once
    the message has been sent.
  * node: Rename "io.js" code to "Node.js".
  * node-gyp: This release bundles an updated version of node-gyp
    that works with all versions of Node.js and io.js including
    nightly and release candidate builds. From io.js v3 and Node.js
    v4 onward, it will only download a headers tarball when building
    addons rather than the entire source.
  * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security
    update.
  * timers: Improved timer performance from porting the 0.12
    implementation, plus minor fixes.
  * util: The util.is*() functions have been deprecated, beginning
    with deprecation warnings in the documentation for this release,
    users are encouraged to seek more robust alternatives in the
    npm registry.
  * v8: Upgrade to version 4.5.103.30 from 4.4.63.30
    + Implement new TypedArray prototype methods: copyWithin(),
    every(), fill(), filter(), find(), findIndex(), forEach(),
    indexOf(), join(), lastIndexOf(), map(), reduce(),
    reduceRight(), reverse(), slice(), some(), sort().
    + Implement new TypedArray.from() and TypedArray.of() functions.
    + Implement arrow functions
- drop nodejs-openssl-missing-api.patch: it's for 0.9.8.
- ppc/ppc64(le) is natively supported since nodejs 3.0.0.
  so drop nodejs-v0.12.7-release-ppc.patch.bz2
- drop node-gcc5.patch, upstream fixed
- add nodejs-lib64path.patch, adjust libdir
- add nodejs-libpath.patch, adjust libdir
- add node-gyp-addon-gypi.patch
  * use custom addon.gypi by default instead of downloading
    node source
- add node_modules clean up codes</changelog>

</package>
<package pkgid="bbac743622da678c77c0859fe0857c3e02bcb540b96e7465ccd51adf1d945cbc" name="nodejs-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.1" rel="6.1"/>

<changelog author="i@marguerite.su" date="1399032000">- update version 0.10.27
  * npm: upgrade to v1.4.8
  * openssl: upgrade to 1.0.1g
  * uv: update to v0.10.27
  * dns: fix certain txt entries (Fedor Indutny)
  * assert: Ensure reflexivity of deepEqual (Mike Pennisi)
  * child_process: fix deadlock when sending handles (Fedor Indutny)
  * child_process: fix sending handle twice (Fedor Indutny)
  * crypto: do not lowercase cipher/hash names (Fedor Indutny)
  * dtrace: workaround linker bug on FreeBSD (Fedor Indutny)
  * http: do not emit EOF non-readable socket (Fedor Indutny)
  * http: invoke createConnection when no agent (Nathan Rajlich)
  * stream: remove useless check (Brian White)
  * timer: don't reschedule timer bucket in a domain (Greg Brail)
  * url: treat \ the same as / (isaacs)
  * util: format as Error if instanceof Error (Rod Vagg)
- add macros.nodejs</changelog>
<changelog author="nikolai@prokoschenko.de" date="1401278400">- fixes
  * initialization of the next build step was missing in case original node
    headers were to be used in node-gyp</changelog>
<changelog author="i@marguerite.su" date="1405684800">- fix changelog chronologically</changelog>
<changelog author="i@marguerite.su" date="1405684801">- update version 0.10.29
  * openssl: to 1.0.1h (CVE-2014-0224)
  * npm: upgrade to 1.4.10
  * utf8: Prevent Node from sending invalid UTF-8 (Felix Geisendörfer)
  * NOTE* this introduces a breaking change, previously you could construct
    invalid UTF-8 and invoke an error in a client that was expecting valid
    UTF-8, now unmatched surrogate pairs are replaced with the unknown UTF-8
    character. To restore the old functionality simply have NODE_INVALID_UTF8
    environment variable set.
  * child_process: do not set args before throwing (Greg Sabia Tucker)
  * child_process: spawn() does not throw TypeError (Greg Sabia Tucker)
  * constants: export O_NONBLOCK (Fedor Indutny)
  * crypto: improve memory usage (Alexis Campailla)
  * fs: close file if fstat() fails in readFile() (cjihrig)
  * lib: name EventEmitter prototype methods (Ben Noordhuis)
  * tls: fix performance issue (Alexis Campailla)</changelog>
<changelog author="i@marguerite.su" date="1406635200">- fix a typo in macros.nodejs
- explicitly use /usr/lib, %%{_libexecdir} will resolve to
  /usr/lib64 on sles x86_64 versions.</changelog>
<changelog author="javier@opensuse.org" date="1408190400">- Update to version 0.10.30
  * uv: Upgrade to v0.10.28
  * npm: Upgrade to v1.4.21
  * v8: Interrupts must not mask stack overflow.
  * Revert "stream: start old-mode read in a next tick" (Fedor Indutny)
  * buffer: fix sign overflow in `readUIn32BE` (Fedor Indutny)
  * buffer: improve {read,write}{U}Int* methods (Nick Apperson)
  * child_process: handle writeUtf8String error (Fedor Indutny)
  * deps: backport 4ed5fde4f from v8 upstream (Fedor Indutny)
  * deps: cherry-pick eca441b2 from OpenSSL (Fedor Indutny)
  * lib: remove and restructure calls to isNaN() (cjihrig)
  * module: eliminate double `getenv()` (Maciej Małecki)
  * stream2: flush extant data on read of ended stream (Chris Dickinson)
  * streams: remove unused require('assert') (Rod Vagg)
  * timers: backport f8193ab (Julien Gilli)
  * util.h: interface compatibility (Oguz Bastemur)
  * zlib: do not crash on write after close (Fedor Indutny)</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 0.10.31
  * v8: backport CVE-2013-6668
  * openssl: Update to v1.0.1i
  * npm: Update to v1.4.23
  * cluster: disconnect should not be synchronous
  * fs: fix fs.readFileSync fd leak when get RangeError
  * stream: fix Readable.wrap objectMode falsy values
  * timers: fix timers with non-integer delay hanging</changelog>
<changelog author="i@marguerite.su" date="1408795200">- workaround for sles</changelog>
<changelog author="jgleissner@suse.com" date="1410350400">- do not install NPM
- use /usr/lib/node_modules instead of /usr/lib64/node_modules even
  on x86_64 (node modules are not binary)
- drop patch: nodejs-lib64path.patch and nodejs-libpath.patch
  * installing in /usr/lib64 doesn't really make sense for non-binary files
- drop patch: node-gyp-addon-gypi.patch and
  nodejs-add_missing_shebang_to_read-package-json.patch
  * they were patching npm files, which is separate now</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 0.10.32
  * v8: fix a crash introduced by previous release
  * configure: add --openssl-no-asm flag
  * crypto: use domains for any callback-taking method
  * http: do not send `0\r\n\r\n` in TE HEAD responses
  * querystring: fix unescape override
  * url: Add support for RFC 3490 separators</changelog>
<changelog author="jgleissner@suse.com" date="1412856000">- removed macros.nodejs (moved to nodejs-packaging)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1421841600">- Add three arches to ExclusiveArch: ppc ppc64 ppc64le
- Add nodejs-v0.10.32-release-ppc.patch.bz2 for them
  (required as PowerPC support not yet upstream)
  (the patch header details how it is created)
- do not configure --with-gdb for those architectures</changelog>
<changelog author="i@marguerite.su" date="1425211200">- update version 0.12.0
  * npm: upgrade to 2.5.1
  * mdb_v8: update for v0.12
- drop nodejs-v0.10.32-release-ppc.patch.bz2
- add nodejs-v0.12.0-release-ppc.patch.bz2
- add README.SUSE.PowerPC to explain how to generate ppc patch</changelog>
<changelog author="dmacvicar@suse.de" date="1426766400">- enable s390x</changelog>
<changelog author="dmueller@suse.com" date="1428062400">- enable aarch64
- add support-arm64-build.patch</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 0.12.4
  * npm: upgrade to 2.10.1
  * V8: revert v8 Array.prototype.values() removal
  * win: bring back xp/2k3 support
- previous changes from 0.12.1 to 0.12.3 see ChangeLog</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 0.12.5
  * openssl: upgrade to 1.0.1o
  * npm: upgrade to 2.11.2
  * uv: upgrade to 1.6.1
  * V8: avoid deadlock when profiling is active
  * install: fix source path for openssl headers
  * install: make sure opensslconf.h is overwritten
  * timers: fix timeout when added in timer's callback
- add patch: node-gcc5.patch
  * fix gcc 5 version detection</changelog>
<changelog author="i@marguerite.su" date="1437825600">- build with bundled npm</changelog>
<changelog author="i@marguerite.su" date="1438171200">- update version 0.12.7
  * openssl: upgrade to 1.0.1p
  * npm: upgrade to 2.11.3
  * v8: cherry-pick JitCodeEvent patch from upstream
- changes in 0.12.6
  * v8: fix out-of-band write in utf8 decoder
  * fix boo#937414: CVE-2015-5380: nodejs: out of band write</changelog>
<changelog author="i@marguerite.su" date="1445169600">- fixed boo#948602/CVE-2015-7384:
  * nodejs: HTTP Denial of Service Vulnerability
- install missing addon-rpm.gypi (boo#948045)
- update to 4.2.1
  * Includes fixes for two regressions
    + Assertion error in WeakCallback
    + Undefined timeout regression
- changes in 4.2.0
  * icu: Updated to version 56 with significant performance
    improvements
  * node:
    + Added new -c (or --check) command line argument for checking
    script syntax without executing the code
    + Added process.versions.icu to hold the current ICU library
    version
    + Added process.release.lts to hold the current LTS codename
    when the binary is from an active LTS release line
  * npm: Upgraded to npm 2.14.7 from 2.14.4
- changes in 4.1.2
  * http:
    + Fix out-of-order 'finish' event bug in pipelining that can
    abort execution, fixes DoS vulnerability CVE-2015-7384
    + Account for pending response data instead of just the data
    on the current request to decide whether pause the socket
    or not
    + libuv: Upgraded from v1.7.4 to v1.7.5
    + Improved AIX support
  * v8:
    + Upgraded from v4.5.103.33 to v4.5.103.35
    + Backported f782159 from v8's upstream to help speed up Promise
    introspection
    + Backported c281c15 from v8's upstream to add JSTypedArray
    length in post-mortem metadata
- changes in 4.1.1
  * buffer: Fixed a bug introduced in v4.1.0 where allocating a new
    zero-length buffer can result in the next allocation of a
    TypedArray in JavaScript not being zero-filled. In certain
    circumstances this could result in data leakage via reuse of
    memory space in TypedArrays, breaking the normally safe assumption
    that TypedArrays should be always zero-filled.
  * http: Guard against response-splitting of HTTP trailing headers
    added via response.addTrailers() by removing new-line ([\r\n])
    characters from values. Note that standard header values are
    already stripped of new-line characters. The expected security
    impact is low because trailing headers are rarely used.
  * npm:
    + Upgrade to npm 2.14.4 from 2.14.3
    + Upgrades graceful-fs on multiple dependencies to no longer
    rely on monkey-patching fs
    + Fix npm link for pre-release / RC builds of Node
  * v8:
    + Update post-mortem metadata to allow post-mortem debugging
    tools to find and inspect:
    + JavaScript objects that use dictionary properties ScopeInfo
    and thus closures
- changes in 4.1.0
  * buffer:
    + Buffers are now created in JavaScript, rather than C++.
    This increases the speed of buffer creation
    + Buffer#slice() now uses Uint8Array#subarray() internally,
    increasing slice() performance
  * fs:
    + fs.utimes() now properly converts numeric strings, NaN,
    and Infinity
    + fs.WriteStream now implements _writev, allowing for
    super-fast bulk writes
  * http: Fixed an issue with certain write() sizes causing errors
    when using http.request()
  * npm: Upgrade to version 2.14.3
  * src: V8 cpu profiling no longer erroneously shows idle time
  * timers: #ref() and #unref() now return the timer they belong to
  * v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor
    fixes. This fixes a previously known bug where some computed
    object shorthand properties did not work correctly.
- changes in 4.0.0
  * child_process: ChildProcess.prototype.send() and process.send()
    operate asynchronously across all platforms so an optional
    callback parameter has been introduced that will be invoked once
    the message has been sent.
  * node: Rename "io.js" code to "Node.js".
  * node-gyp: This release bundles an updated version of node-gyp
    that works with all versions of Node.js and io.js including
    nightly and release candidate builds. From io.js v3 and Node.js
    v4 onward, it will only download a headers tarball when building
    addons rather than the entire source.
  * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security
    update.
  * timers: Improved timer performance from porting the 0.12
    implementation, plus minor fixes.
  * util: The util.is*() functions have been deprecated, beginning
    with deprecation warnings in the documentation for this release,
    users are encouraged to seek more robust alternatives in the
    npm registry.
  * v8: Upgrade to version 4.5.103.30 from 4.4.63.30
    + Implement new TypedArray prototype methods: copyWithin(),
    every(), fill(), filter(), find(), findIndex(), forEach(),
    indexOf(), join(), lastIndexOf(), map(), reduce(),
    reduceRight(), reverse(), slice(), some(), sort().
    + Implement new TypedArray.from() and TypedArray.of() functions.
    + Implement arrow functions
- drop nodejs-openssl-missing-api.patch: it's for 0.9.8.
- ppc/ppc64(le) is natively supported since nodejs 3.0.0.
  so drop nodejs-v0.12.7-release-ppc.patch.bz2
- drop node-gcc5.patch, upstream fixed
- add nodejs-lib64path.patch, adjust libdir
- add nodejs-libpath.patch, adjust libdir
- add node-gyp-addon-gypi.patch
  * use custom addon.gypi by default instead of downloading
    node source
- add node_modules clean up codes</changelog>

</package>
<package pkgid="b83ef67a309510965e2a2873d51cf2c782a3f38937f845fc954a8af3ed2a4518" name="nodejs-debugsource" arch="x86_64">
    <version epoch="0" ver="4.2.1" rel="6.1"/>

<changelog author="i@marguerite.su" date="1399032000">- update version 0.10.27
  * npm: upgrade to v1.4.8
  * openssl: upgrade to 1.0.1g
  * uv: update to v0.10.27
  * dns: fix certain txt entries (Fedor Indutny)
  * assert: Ensure reflexivity of deepEqual (Mike Pennisi)
  * child_process: fix deadlock when sending handles (Fedor Indutny)
  * child_process: fix sending handle twice (Fedor Indutny)
  * crypto: do not lowercase cipher/hash names (Fedor Indutny)
  * dtrace: workaround linker bug on FreeBSD (Fedor Indutny)
  * http: do not emit EOF non-readable socket (Fedor Indutny)
  * http: invoke createConnection when no agent (Nathan Rajlich)
  * stream: remove useless check (Brian White)
  * timer: don't reschedule timer bucket in a domain (Greg Brail)
  * url: treat \ the same as / (isaacs)
  * util: format as Error if instanceof Error (Rod Vagg)
- add macros.nodejs</changelog>
<changelog author="nikolai@prokoschenko.de" date="1401278400">- fixes
  * initialization of the next build step was missing in case original node
    headers were to be used in node-gyp</changelog>
<changelog author="i@marguerite.su" date="1405684800">- fix changelog chronologically</changelog>
<changelog author="i@marguerite.su" date="1405684801">- update version 0.10.29
  * openssl: to 1.0.1h (CVE-2014-0224)
  * npm: upgrade to 1.4.10
  * utf8: Prevent Node from sending invalid UTF-8 (Felix Geisendörfer)
  * NOTE* this introduces a breaking change, previously you could construct
    invalid UTF-8 and invoke an error in a client that was expecting valid
    UTF-8, now unmatched surrogate pairs are replaced with the unknown UTF-8
    character. To restore the old functionality simply have NODE_INVALID_UTF8
    environment variable set.
  * child_process: do not set args before throwing (Greg Sabia Tucker)
  * child_process: spawn() does not throw TypeError (Greg Sabia Tucker)
  * constants: export O_NONBLOCK (Fedor Indutny)
  * crypto: improve memory usage (Alexis Campailla)
  * fs: close file if fstat() fails in readFile() (cjihrig)
  * lib: name EventEmitter prototype methods (Ben Noordhuis)
  * tls: fix performance issue (Alexis Campailla)</changelog>
<changelog author="i@marguerite.su" date="1406635200">- fix a typo in macros.nodejs
- explicitly use /usr/lib, %%{_libexecdir} will resolve to
  /usr/lib64 on sles x86_64 versions.</changelog>
<changelog author="javier@opensuse.org" date="1408190400">- Update to version 0.10.30
  * uv: Upgrade to v0.10.28
  * npm: Upgrade to v1.4.21
  * v8: Interrupts must not mask stack overflow.
  * Revert "stream: start old-mode read in a next tick" (Fedor Indutny)
  * buffer: fix sign overflow in `readUIn32BE` (Fedor Indutny)
  * buffer: improve {read,write}{U}Int* methods (Nick Apperson)
  * child_process: handle writeUtf8String error (Fedor Indutny)
  * deps: backport 4ed5fde4f from v8 upstream (Fedor Indutny)
  * deps: cherry-pick eca441b2 from OpenSSL (Fedor Indutny)
  * lib: remove and restructure calls to isNaN() (cjihrig)
  * module: eliminate double `getenv()` (Maciej Małecki)
  * stream2: flush extant data on read of ended stream (Chris Dickinson)
  * streams: remove unused require('assert') (Rod Vagg)
  * timers: backport f8193ab (Julien Gilli)
  * util.h: interface compatibility (Oguz Bastemur)
  * zlib: do not crash on write after close (Fedor Indutny)</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 0.10.31
  * v8: backport CVE-2013-6668
  * openssl: Update to v1.0.1i
  * npm: Update to v1.4.23
  * cluster: disconnect should not be synchronous
  * fs: fix fs.readFileSync fd leak when get RangeError
  * stream: fix Readable.wrap objectMode falsy values
  * timers: fix timers with non-integer delay hanging</changelog>
<changelog author="i@marguerite.su" date="1408795200">- workaround for sles</changelog>
<changelog author="jgleissner@suse.com" date="1410350400">- do not install NPM
- use /usr/lib/node_modules instead of /usr/lib64/node_modules even
  on x86_64 (node modules are not binary)
- drop patch: nodejs-lib64path.patch and nodejs-libpath.patch
  * installing in /usr/lib64 doesn't really make sense for non-binary files
- drop patch: node-gyp-addon-gypi.patch and
  nodejs-add_missing_shebang_to_read-package-json.patch
  * they were patching npm files, which is separate now</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 0.10.32
  * v8: fix a crash introduced by previous release
  * configure: add --openssl-no-asm flag
  * crypto: use domains for any callback-taking method
  * http: do not send `0\r\n\r\n` in TE HEAD responses
  * querystring: fix unescape override
  * url: Add support for RFC 3490 separators</changelog>
<changelog author="jgleissner@suse.com" date="1412856000">- removed macros.nodejs (moved to nodejs-packaging)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1421841600">- Add three arches to ExclusiveArch: ppc ppc64 ppc64le
- Add nodejs-v0.10.32-release-ppc.patch.bz2 for them
  (required as PowerPC support not yet upstream)
  (the patch header details how it is created)
- do not configure --with-gdb for those architectures</changelog>
<changelog author="i@marguerite.su" date="1425211200">- update version 0.12.0
  * npm: upgrade to 2.5.1
  * mdb_v8: update for v0.12
- drop nodejs-v0.10.32-release-ppc.patch.bz2
- add nodejs-v0.12.0-release-ppc.patch.bz2
- add README.SUSE.PowerPC to explain how to generate ppc patch</changelog>
<changelog author="dmacvicar@suse.de" date="1426766400">- enable s390x</changelog>
<changelog author="dmueller@suse.com" date="1428062400">- enable aarch64
- add support-arm64-build.patch</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 0.12.4
  * npm: upgrade to 2.10.1
  * V8: revert v8 Array.prototype.values() removal
  * win: bring back xp/2k3 support
- previous changes from 0.12.1 to 0.12.3 see ChangeLog</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 0.12.5
  * openssl: upgrade to 1.0.1o
  * npm: upgrade to 2.11.2
  * uv: upgrade to 1.6.1
  * V8: avoid deadlock when profiling is active
  * install: fix source path for openssl headers
  * install: make sure opensslconf.h is overwritten
  * timers: fix timeout when added in timer's callback
- add patch: node-gcc5.patch
  * fix gcc 5 version detection</changelog>
<changelog author="i@marguerite.su" date="1437825600">- build with bundled npm</changelog>
<changelog author="i@marguerite.su" date="1438171200">- update version 0.12.7
  * openssl: upgrade to 1.0.1p
  * npm: upgrade to 2.11.3
  * v8: cherry-pick JitCodeEvent patch from upstream
- changes in 0.12.6
  * v8: fix out-of-band write in utf8 decoder
  * fix boo#937414: CVE-2015-5380: nodejs: out of band write</changelog>
<changelog author="i@marguerite.su" date="1445169600">- fixed boo#948602/CVE-2015-7384:
  * nodejs: HTTP Denial of Service Vulnerability
- install missing addon-rpm.gypi (boo#948045)
- update to 4.2.1
  * Includes fixes for two regressions
    + Assertion error in WeakCallback
    + Undefined timeout regression
- changes in 4.2.0
  * icu: Updated to version 56 with significant performance
    improvements
  * node:
    + Added new -c (or --check) command line argument for checking
    script syntax without executing the code
    + Added process.versions.icu to hold the current ICU library
    version
    + Added process.release.lts to hold the current LTS codename
    when the binary is from an active LTS release line
  * npm: Upgraded to npm 2.14.7 from 2.14.4
- changes in 4.1.2
  * http:
    + Fix out-of-order 'finish' event bug in pipelining that can
    abort execution, fixes DoS vulnerability CVE-2015-7384
    + Account for pending response data instead of just the data
    on the current request to decide whether pause the socket
    or not
    + libuv: Upgraded from v1.7.4 to v1.7.5
    + Improved AIX support
  * v8:
    + Upgraded from v4.5.103.33 to v4.5.103.35
    + Backported f782159 from v8's upstream to help speed up Promise
    introspection
    + Backported c281c15 from v8's upstream to add JSTypedArray
    length in post-mortem metadata
- changes in 4.1.1
  * buffer: Fixed a bug introduced in v4.1.0 where allocating a new
    zero-length buffer can result in the next allocation of a
    TypedArray in JavaScript not being zero-filled. In certain
    circumstances this could result in data leakage via reuse of
    memory space in TypedArrays, breaking the normally safe assumption
    that TypedArrays should be always zero-filled.
  * http: Guard against response-splitting of HTTP trailing headers
    added via response.addTrailers() by removing new-line ([\r\n])
    characters from values. Note that standard header values are
    already stripped of new-line characters. The expected security
    impact is low because trailing headers are rarely used.
  * npm:
    + Upgrade to npm 2.14.4 from 2.14.3
    + Upgrades graceful-fs on multiple dependencies to no longer
    rely on monkey-patching fs
    + Fix npm link for pre-release / RC builds of Node
  * v8:
    + Update post-mortem metadata to allow post-mortem debugging
    tools to find and inspect:
    + JavaScript objects that use dictionary properties ScopeInfo
    and thus closures
- changes in 4.1.0
  * buffer:
    + Buffers are now created in JavaScript, rather than C++.
    This increases the speed of buffer creation
    + Buffer#slice() now uses Uint8Array#subarray() internally,
    increasing slice() performance
  * fs:
    + fs.utimes() now properly converts numeric strings, NaN,
    and Infinity
    + fs.WriteStream now implements _writev, allowing for
    super-fast bulk writes
  * http: Fixed an issue with certain write() sizes causing errors
    when using http.request()
  * npm: Upgrade to version 2.14.3
  * src: V8 cpu profiling no longer erroneously shows idle time
  * timers: #ref() and #unref() now return the timer they belong to
  * v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor
    fixes. This fixes a previously known bug where some computed
    object shorthand properties did not work correctly.
- changes in 4.0.0
  * child_process: ChildProcess.prototype.send() and process.send()
    operate asynchronously across all platforms so an optional
    callback parameter has been introduced that will be invoked once
    the message has been sent.
  * node: Rename "io.js" code to "Node.js".
  * node-gyp: This release bundles an updated version of node-gyp
    that works with all versions of Node.js and io.js including
    nightly and release candidate builds. From io.js v3 and Node.js
    v4 onward, it will only download a headers tarball when building
    addons rather than the entire source.
  * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security
    update.
  * timers: Improved timer performance from porting the 0.12
    implementation, plus minor fixes.
  * util: The util.is*() functions have been deprecated, beginning
    with deprecation warnings in the documentation for this release,
    users are encouraged to seek more robust alternatives in the
    npm registry.
  * v8: Upgrade to version 4.5.103.30 from 4.4.63.30
    + Implement new TypedArray prototype methods: copyWithin(),
    every(), fill(), filter(), find(), findIndex(), forEach(),
    indexOf(), join(), lastIndexOf(), map(), reduce(),
    reduceRight(), reverse(), slice(), some(), sort().
    + Implement new TypedArray.from() and TypedArray.of() functions.
    + Implement arrow functions
- drop nodejs-openssl-missing-api.patch: it's for 0.9.8.
- ppc/ppc64(le) is natively supported since nodejs 3.0.0.
  so drop nodejs-v0.12.7-release-ppc.patch.bz2
- drop node-gcc5.patch, upstream fixed
- add nodejs-lib64path.patch, adjust libdir
- add nodejs-libpath.patch, adjust libdir
- add node-gyp-addon-gypi.patch
  * use custom addon.gypi by default instead of downloading
    node source
- add node_modules clean up codes</changelog>

</package>
<package pkgid="07e982e84a9495ed79e4a5893cf07f987f1b558811b47ad85a5e7763c96b77c5" name="nodejs-devel" arch="x86_64">
    <version epoch="0" ver="4.2.1" rel="6.1"/>

<changelog author="i@marguerite.su" date="1399032000">- update version 0.10.27
  * npm: upgrade to v1.4.8
  * openssl: upgrade to 1.0.1g
  * uv: update to v0.10.27
  * dns: fix certain txt entries (Fedor Indutny)
  * assert: Ensure reflexivity of deepEqual (Mike Pennisi)
  * child_process: fix deadlock when sending handles (Fedor Indutny)
  * child_process: fix sending handle twice (Fedor Indutny)
  * crypto: do not lowercase cipher/hash names (Fedor Indutny)
  * dtrace: workaround linker bug on FreeBSD (Fedor Indutny)
  * http: do not emit EOF non-readable socket (Fedor Indutny)
  * http: invoke createConnection when no agent (Nathan Rajlich)
  * stream: remove useless check (Brian White)
  * timer: don't reschedule timer bucket in a domain (Greg Brail)
  * url: treat \ the same as / (isaacs)
  * util: format as Error if instanceof Error (Rod Vagg)
- add macros.nodejs</changelog>
<changelog author="nikolai@prokoschenko.de" date="1401278400">- fixes
  * initialization of the next build step was missing in case original node
    headers were to be used in node-gyp</changelog>
<changelog author="i@marguerite.su" date="1405684800">- fix changelog chronologically</changelog>
<changelog author="i@marguerite.su" date="1405684801">- update version 0.10.29
  * openssl: to 1.0.1h (CVE-2014-0224)
  * npm: upgrade to 1.4.10
  * utf8: Prevent Node from sending invalid UTF-8 (Felix Geisendörfer)
  * NOTE* this introduces a breaking change, previously you could construct
    invalid UTF-8 and invoke an error in a client that was expecting valid
    UTF-8, now unmatched surrogate pairs are replaced with the unknown UTF-8
    character. To restore the old functionality simply have NODE_INVALID_UTF8
    environment variable set.
  * child_process: do not set args before throwing (Greg Sabia Tucker)
  * child_process: spawn() does not throw TypeError (Greg Sabia Tucker)
  * constants: export O_NONBLOCK (Fedor Indutny)
  * crypto: improve memory usage (Alexis Campailla)
  * fs: close file if fstat() fails in readFile() (cjihrig)
  * lib: name EventEmitter prototype methods (Ben Noordhuis)
  * tls: fix performance issue (Alexis Campailla)</changelog>
<changelog author="i@marguerite.su" date="1406635200">- fix a typo in macros.nodejs
- explicitly use /usr/lib, %%{_libexecdir} will resolve to
  /usr/lib64 on sles x86_64 versions.</changelog>
<changelog author="javier@opensuse.org" date="1408190400">- Update to version 0.10.30
  * uv: Upgrade to v0.10.28
  * npm: Upgrade to v1.4.21
  * v8: Interrupts must not mask stack overflow.
  * Revert "stream: start old-mode read in a next tick" (Fedor Indutny)
  * buffer: fix sign overflow in `readUIn32BE` (Fedor Indutny)
  * buffer: improve {read,write}{U}Int* methods (Nick Apperson)
  * child_process: handle writeUtf8String error (Fedor Indutny)
  * deps: backport 4ed5fde4f from v8 upstream (Fedor Indutny)
  * deps: cherry-pick eca441b2 from OpenSSL (Fedor Indutny)
  * lib: remove and restructure calls to isNaN() (cjihrig)
  * module: eliminate double `getenv()` (Maciej Małecki)
  * stream2: flush extant data on read of ended stream (Chris Dickinson)
  * streams: remove unused require('assert') (Rod Vagg)
  * timers: backport f8193ab (Julien Gilli)
  * util.h: interface compatibility (Oguz Bastemur)
  * zlib: do not crash on write after close (Fedor Indutny)</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 0.10.31
  * v8: backport CVE-2013-6668
  * openssl: Update to v1.0.1i
  * npm: Update to v1.4.23
  * cluster: disconnect should not be synchronous
  * fs: fix fs.readFileSync fd leak when get RangeError
  * stream: fix Readable.wrap objectMode falsy values
  * timers: fix timers with non-integer delay hanging</changelog>
<changelog author="i@marguerite.su" date="1408795200">- workaround for sles</changelog>
<changelog author="jgleissner@suse.com" date="1410350400">- do not install NPM
- use /usr/lib/node_modules instead of /usr/lib64/node_modules even
  on x86_64 (node modules are not binary)
- drop patch: nodejs-lib64path.patch and nodejs-libpath.patch
  * installing in /usr/lib64 doesn't really make sense for non-binary files
- drop patch: node-gyp-addon-gypi.patch and
  nodejs-add_missing_shebang_to_read-package-json.patch
  * they were patching npm files, which is separate now</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 0.10.32
  * v8: fix a crash introduced by previous release
  * configure: add --openssl-no-asm flag
  * crypto: use domains for any callback-taking method
  * http: do not send `0\r\n\r\n` in TE HEAD responses
  * querystring: fix unescape override
  * url: Add support for RFC 3490 separators</changelog>
<changelog author="jgleissner@suse.com" date="1412856000">- removed macros.nodejs (moved to nodejs-packaging)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1421841600">- Add three arches to ExclusiveArch: ppc ppc64 ppc64le
- Add nodejs-v0.10.32-release-ppc.patch.bz2 for them
  (required as PowerPC support not yet upstream)
  (the patch header details how it is created)
- do not configure --with-gdb for those architectures</changelog>
<changelog author="i@marguerite.su" date="1425211200">- update version 0.12.0
  * npm: upgrade to 2.5.1
  * mdb_v8: update for v0.12
- drop nodejs-v0.10.32-release-ppc.patch.bz2
- add nodejs-v0.12.0-release-ppc.patch.bz2
- add README.SUSE.PowerPC to explain how to generate ppc patch</changelog>
<changelog author="dmacvicar@suse.de" date="1426766400">- enable s390x</changelog>
<changelog author="dmueller@suse.com" date="1428062400">- enable aarch64
- add support-arm64-build.patch</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 0.12.4
  * npm: upgrade to 2.10.1
  * V8: revert v8 Array.prototype.values() removal
  * win: bring back xp/2k3 support
- previous changes from 0.12.1 to 0.12.3 see ChangeLog</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 0.12.5
  * openssl: upgrade to 1.0.1o
  * npm: upgrade to 2.11.2
  * uv: upgrade to 1.6.1
  * V8: avoid deadlock when profiling is active
  * install: fix source path for openssl headers
  * install: make sure opensslconf.h is overwritten
  * timers: fix timeout when added in timer's callback
- add patch: node-gcc5.patch
  * fix gcc 5 version detection</changelog>
<changelog author="i@marguerite.su" date="1437825600">- build with bundled npm</changelog>
<changelog author="i@marguerite.su" date="1438171200">- update version 0.12.7
  * openssl: upgrade to 1.0.1p
  * npm: upgrade to 2.11.3
  * v8: cherry-pick JitCodeEvent patch from upstream
- changes in 0.12.6
  * v8: fix out-of-band write in utf8 decoder
  * fix boo#937414: CVE-2015-5380: nodejs: out of band write</changelog>
<changelog author="i@marguerite.su" date="1445169600">- fixed boo#948602/CVE-2015-7384:
  * nodejs: HTTP Denial of Service Vulnerability
- install missing addon-rpm.gypi (boo#948045)
- update to 4.2.1
  * Includes fixes for two regressions
    + Assertion error in WeakCallback
    + Undefined timeout regression
- changes in 4.2.0
  * icu: Updated to version 56 with significant performance
    improvements
  * node:
    + Added new -c (or --check) command line argument for checking
    script syntax without executing the code
    + Added process.versions.icu to hold the current ICU library
    version
    + Added process.release.lts to hold the current LTS codename
    when the binary is from an active LTS release line
  * npm: Upgraded to npm 2.14.7 from 2.14.4
- changes in 4.1.2
  * http:
    + Fix out-of-order 'finish' event bug in pipelining that can
    abort execution, fixes DoS vulnerability CVE-2015-7384
    + Account for pending response data instead of just the data
    on the current request to decide whether pause the socket
    or not
    + libuv: Upgraded from v1.7.4 to v1.7.5
    + Improved AIX support
  * v8:
    + Upgraded from v4.5.103.33 to v4.5.103.35
    + Backported f782159 from v8's upstream to help speed up Promise
    introspection
    + Backported c281c15 from v8's upstream to add JSTypedArray
    length in post-mortem metadata
- changes in 4.1.1
  * buffer: Fixed a bug introduced in v4.1.0 where allocating a new
    zero-length buffer can result in the next allocation of a
    TypedArray in JavaScript not being zero-filled. In certain
    circumstances this could result in data leakage via reuse of
    memory space in TypedArrays, breaking the normally safe assumption
    that TypedArrays should be always zero-filled.
  * http: Guard against response-splitting of HTTP trailing headers
    added via response.addTrailers() by removing new-line ([\r\n])
    characters from values. Note that standard header values are
    already stripped of new-line characters. The expected security
    impact is low because trailing headers are rarely used.
  * npm:
    + Upgrade to npm 2.14.4 from 2.14.3
    + Upgrades graceful-fs on multiple dependencies to no longer
    rely on monkey-patching fs
    + Fix npm link for pre-release / RC builds of Node
  * v8:
    + Update post-mortem metadata to allow post-mortem debugging
    tools to find and inspect:
    + JavaScript objects that use dictionary properties ScopeInfo
    and thus closures
- changes in 4.1.0
  * buffer:
    + Buffers are now created in JavaScript, rather than C++.
    This increases the speed of buffer creation
    + Buffer#slice() now uses Uint8Array#subarray() internally,
    increasing slice() performance
  * fs:
    + fs.utimes() now properly converts numeric strings, NaN,
    and Infinity
    + fs.WriteStream now implements _writev, allowing for
    super-fast bulk writes
  * http: Fixed an issue with certain write() sizes causing errors
    when using http.request()
  * npm: Upgrade to version 2.14.3
  * src: V8 cpu profiling no longer erroneously shows idle time
  * timers: #ref() and #unref() now return the timer they belong to
  * v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor
    fixes. This fixes a previously known bug where some computed
    object shorthand properties did not work correctly.
- changes in 4.0.0
  * child_process: ChildProcess.prototype.send() and process.send()
    operate asynchronously across all platforms so an optional
    callback parameter has been introduced that will be invoked once
    the message has been sent.
  * node: Rename "io.js" code to "Node.js".
  * node-gyp: This release bundles an updated version of node-gyp
    that works with all versions of Node.js and io.js including
    nightly and release candidate builds. From io.js v3 and Node.js
    v4 onward, it will only download a headers tarball when building
    addons rather than the entire source.
  * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security
    update.
  * timers: Improved timer performance from porting the 0.12
    implementation, plus minor fixes.
  * util: The util.is*() functions have been deprecated, beginning
    with deprecation warnings in the documentation for this release,
    users are encouraged to seek more robust alternatives in the
    npm registry.
  * v8: Upgrade to version 4.5.103.30 from 4.4.63.30
    + Implement new TypedArray prototype methods: copyWithin(),
    every(), fill(), filter(), find(), findIndex(), forEach(),
    indexOf(), join(), lastIndexOf(), map(), reduce(),
    reduceRight(), reverse(), slice(), some(), sort().
    + Implement new TypedArray.from() and TypedArray.of() functions.
    + Implement arrow functions
- drop nodejs-openssl-missing-api.patch: it's for 0.9.8.
- ppc/ppc64(le) is natively supported since nodejs 3.0.0.
  so drop nodejs-v0.12.7-release-ppc.patch.bz2
- drop node-gcc5.patch, upstream fixed
- add nodejs-lib64path.patch, adjust libdir
- add nodejs-libpath.patch, adjust libdir
- add node-gyp-addon-gypi.patch
  * use custom addon.gypi by default instead of downloading
    node source
- add node_modules clean up codes</changelog>

</package>
<package pkgid="46bd38ee2cefee15810f3638c6d7535849583443f877bd3ec63b386fc1fd8db8" name="nodejs-docs" arch="noarch">
    <version epoch="0" ver="4.2.1" rel="6.1"/>

<changelog author="i@marguerite.su" date="1399032000">- update version 0.10.27
  * npm: upgrade to v1.4.8
  * openssl: upgrade to 1.0.1g
  * uv: update to v0.10.27
  * dns: fix certain txt entries (Fedor Indutny)
  * assert: Ensure reflexivity of deepEqual (Mike Pennisi)
  * child_process: fix deadlock when sending handles (Fedor Indutny)
  * child_process: fix sending handle twice (Fedor Indutny)
  * crypto: do not lowercase cipher/hash names (Fedor Indutny)
  * dtrace: workaround linker bug on FreeBSD (Fedor Indutny)
  * http: do not emit EOF non-readable socket (Fedor Indutny)
  * http: invoke createConnection when no agent (Nathan Rajlich)
  * stream: remove useless check (Brian White)
  * timer: don't reschedule timer bucket in a domain (Greg Brail)
  * url: treat \ the same as / (isaacs)
  * util: format as Error if instanceof Error (Rod Vagg)
- add macros.nodejs</changelog>
<changelog author="nikolai@prokoschenko.de" date="1401278400">- fixes
  * initialization of the next build step was missing in case original node
    headers were to be used in node-gyp</changelog>
<changelog author="i@marguerite.su" date="1405684800">- fix changelog chronologically</changelog>
<changelog author="i@marguerite.su" date="1405684801">- update version 0.10.29
  * openssl: to 1.0.1h (CVE-2014-0224)
  * npm: upgrade to 1.4.10
  * utf8: Prevent Node from sending invalid UTF-8 (Felix Geisendörfer)
  * NOTE* this introduces a breaking change, previously you could construct
    invalid UTF-8 and invoke an error in a client that was expecting valid
    UTF-8, now unmatched surrogate pairs are replaced with the unknown UTF-8
    character. To restore the old functionality simply have NODE_INVALID_UTF8
    environment variable set.
  * child_process: do not set args before throwing (Greg Sabia Tucker)
  * child_process: spawn() does not throw TypeError (Greg Sabia Tucker)
  * constants: export O_NONBLOCK (Fedor Indutny)
  * crypto: improve memory usage (Alexis Campailla)
  * fs: close file if fstat() fails in readFile() (cjihrig)
  * lib: name EventEmitter prototype methods (Ben Noordhuis)
  * tls: fix performance issue (Alexis Campailla)</changelog>
<changelog author="i@marguerite.su" date="1406635200">- fix a typo in macros.nodejs
- explicitly use /usr/lib, %%{_libexecdir} will resolve to
  /usr/lib64 on sles x86_64 versions.</changelog>
<changelog author="javier@opensuse.org" date="1408190400">- Update to version 0.10.30
  * uv: Upgrade to v0.10.28
  * npm: Upgrade to v1.4.21
  * v8: Interrupts must not mask stack overflow.
  * Revert "stream: start old-mode read in a next tick" (Fedor Indutny)
  * buffer: fix sign overflow in `readUIn32BE` (Fedor Indutny)
  * buffer: improve {read,write}{U}Int* methods (Nick Apperson)
  * child_process: handle writeUtf8String error (Fedor Indutny)
  * deps: backport 4ed5fde4f from v8 upstream (Fedor Indutny)
  * deps: cherry-pick eca441b2 from OpenSSL (Fedor Indutny)
  * lib: remove and restructure calls to isNaN() (cjihrig)
  * module: eliminate double `getenv()` (Maciej Małecki)
  * stream2: flush extant data on read of ended stream (Chris Dickinson)
  * streams: remove unused require('assert') (Rod Vagg)
  * timers: backport f8193ab (Julien Gilli)
  * util.h: interface compatibility (Oguz Bastemur)
  * zlib: do not crash on write after close (Fedor Indutny)</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 0.10.31
  * v8: backport CVE-2013-6668
  * openssl: Update to v1.0.1i
  * npm: Update to v1.4.23
  * cluster: disconnect should not be synchronous
  * fs: fix fs.readFileSync fd leak when get RangeError
  * stream: fix Readable.wrap objectMode falsy values
  * timers: fix timers with non-integer delay hanging</changelog>
<changelog author="i@marguerite.su" date="1408795200">- workaround for sles</changelog>
<changelog author="jgleissner@suse.com" date="1410350400">- do not install NPM
- use /usr/lib/node_modules instead of /usr/lib64/node_modules even
  on x86_64 (node modules are not binary)
- drop patch: nodejs-lib64path.patch and nodejs-libpath.patch
  * installing in /usr/lib64 doesn't really make sense for non-binary files
- drop patch: node-gyp-addon-gypi.patch and
  nodejs-add_missing_shebang_to_read-package-json.patch
  * they were patching npm files, which is separate now</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 0.10.32
  * v8: fix a crash introduced by previous release
  * configure: add --openssl-no-asm flag
  * crypto: use domains for any callback-taking method
  * http: do not send `0\r\n\r\n` in TE HEAD responses
  * querystring: fix unescape override
  * url: Add support for RFC 3490 separators</changelog>
<changelog author="jgleissner@suse.com" date="1412856000">- removed macros.nodejs (moved to nodejs-packaging)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1421841600">- Add three arches to ExclusiveArch: ppc ppc64 ppc64le
- Add nodejs-v0.10.32-release-ppc.patch.bz2 for them
  (required as PowerPC support not yet upstream)
  (the patch header details how it is created)
- do not configure --with-gdb for those architectures</changelog>
<changelog author="i@marguerite.su" date="1425211200">- update version 0.12.0
  * npm: upgrade to 2.5.1
  * mdb_v8: update for v0.12
- drop nodejs-v0.10.32-release-ppc.patch.bz2
- add nodejs-v0.12.0-release-ppc.patch.bz2
- add README.SUSE.PowerPC to explain how to generate ppc patch</changelog>
<changelog author="dmacvicar@suse.de" date="1426766400">- enable s390x</changelog>
<changelog author="dmueller@suse.com" date="1428062400">- enable aarch64
- add support-arm64-build.patch</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 0.12.4
  * npm: upgrade to 2.10.1
  * V8: revert v8 Array.prototype.values() removal
  * win: bring back xp/2k3 support
- previous changes from 0.12.1 to 0.12.3 see ChangeLog</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 0.12.5
  * openssl: upgrade to 1.0.1o
  * npm: upgrade to 2.11.2
  * uv: upgrade to 1.6.1
  * V8: avoid deadlock when profiling is active
  * install: fix source path for openssl headers
  * install: make sure opensslconf.h is overwritten
  * timers: fix timeout when added in timer's callback
- add patch: node-gcc5.patch
  * fix gcc 5 version detection</changelog>
<changelog author="i@marguerite.su" date="1437825600">- build with bundled npm</changelog>
<changelog author="i@marguerite.su" date="1438171200">- update version 0.12.7
  * openssl: upgrade to 1.0.1p
  * npm: upgrade to 2.11.3
  * v8: cherry-pick JitCodeEvent patch from upstream
- changes in 0.12.6
  * v8: fix out-of-band write in utf8 decoder
  * fix boo#937414: CVE-2015-5380: nodejs: out of band write</changelog>
<changelog author="i@marguerite.su" date="1445169600">- fixed boo#948602/CVE-2015-7384:
  * nodejs: HTTP Denial of Service Vulnerability
- install missing addon-rpm.gypi (boo#948045)
- update to 4.2.1
  * Includes fixes for two regressions
    + Assertion error in WeakCallback
    + Undefined timeout regression
- changes in 4.2.0
  * icu: Updated to version 56 with significant performance
    improvements
  * node:
    + Added new -c (or --check) command line argument for checking
    script syntax without executing the code
    + Added process.versions.icu to hold the current ICU library
    version
    + Added process.release.lts to hold the current LTS codename
    when the binary is from an active LTS release line
  * npm: Upgraded to npm 2.14.7 from 2.14.4
- changes in 4.1.2
  * http:
    + Fix out-of-order 'finish' event bug in pipelining that can
    abort execution, fixes DoS vulnerability CVE-2015-7384
    + Account for pending response data instead of just the data
    on the current request to decide whether pause the socket
    or not
    + libuv: Upgraded from v1.7.4 to v1.7.5
    + Improved AIX support
  * v8:
    + Upgraded from v4.5.103.33 to v4.5.103.35
    + Backported f782159 from v8's upstream to help speed up Promise
    introspection
    + Backported c281c15 from v8's upstream to add JSTypedArray
    length in post-mortem metadata
- changes in 4.1.1
  * buffer: Fixed a bug introduced in v4.1.0 where allocating a new
    zero-length buffer can result in the next allocation of a
    TypedArray in JavaScript not being zero-filled. In certain
    circumstances this could result in data leakage via reuse of
    memory space in TypedArrays, breaking the normally safe assumption
    that TypedArrays should be always zero-filled.
  * http: Guard against response-splitting of HTTP trailing headers
    added via response.addTrailers() by removing new-line ([\r\n])
    characters from values. Note that standard header values are
    already stripped of new-line characters. The expected security
    impact is low because trailing headers are rarely used.
  * npm:
    + Upgrade to npm 2.14.4 from 2.14.3
    + Upgrades graceful-fs on multiple dependencies to no longer
    rely on monkey-patching fs
    + Fix npm link for pre-release / RC builds of Node
  * v8:
    + Update post-mortem metadata to allow post-mortem debugging
    tools to find and inspect:
    + JavaScript objects that use dictionary properties ScopeInfo
    and thus closures
- changes in 4.1.0
  * buffer:
    + Buffers are now created in JavaScript, rather than C++.
    This increases the speed of buffer creation
    + Buffer#slice() now uses Uint8Array#subarray() internally,
    increasing slice() performance
  * fs:
    + fs.utimes() now properly converts numeric strings, NaN,
    and Infinity
    + fs.WriteStream now implements _writev, allowing for
    super-fast bulk writes
  * http: Fixed an issue with certain write() sizes causing errors
    when using http.request()
  * npm: Upgrade to version 2.14.3
  * src: V8 cpu profiling no longer erroneously shows idle time
  * timers: #ref() and #unref() now return the timer they belong to
  * v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor
    fixes. This fixes a previously known bug where some computed
    object shorthand properties did not work correctly.
- changes in 4.0.0
  * child_process: ChildProcess.prototype.send() and process.send()
    operate asynchronously across all platforms so an optional
    callback parameter has been introduced that will be invoked once
    the message has been sent.
  * node: Rename "io.js" code to "Node.js".
  * node-gyp: This release bundles an updated version of node-gyp
    that works with all versions of Node.js and io.js including
    nightly and release candidate builds. From io.js v3 and Node.js
    v4 onward, it will only download a headers tarball when building
    addons rather than the entire source.
  * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security
    update.
  * timers: Improved timer performance from porting the 0.12
    implementation, plus minor fixes.
  * util: The util.is*() functions have been deprecated, beginning
    with deprecation warnings in the documentation for this release,
    users are encouraged to seek more robust alternatives in the
    npm registry.
  * v8: Upgrade to version 4.5.103.30 from 4.4.63.30
    + Implement new TypedArray prototype methods: copyWithin(),
    every(), fill(), filter(), find(), findIndex(), forEach(),
    indexOf(), join(), lastIndexOf(), map(), reduce(),
    reduceRight(), reverse(), slice(), some(), sort().
    + Implement new TypedArray.from() and TypedArray.of() functions.
    + Implement arrow functions
- drop nodejs-openssl-missing-api.patch: it's for 0.9.8.
- ppc/ppc64(le) is natively supported since nodejs 3.0.0.
  so drop nodejs-v0.12.7-release-ppc.patch.bz2
- drop node-gcc5.patch, upstream fixed
- add nodejs-lib64path.patch, adjust libdir
- add nodejs-libpath.patch, adjust libdir
- add node-gyp-addon-gypi.patch
  * use custom addon.gypi by default instead of downloading
    node source
- add node_modules clean up codes</changelog>

</package>
<package pkgid="e040050bb233f6c611f1900b887b4b58c3c6a2abb16d63418b93f8ee465bcc85" name="nodejs-npm" arch="x86_64">
    <version epoch="0" ver="4.2.1" rel="6.1"/>

<changelog author="i@marguerite.su" date="1399032000">- update version 0.10.27
  * npm: upgrade to v1.4.8
  * openssl: upgrade to 1.0.1g
  * uv: update to v0.10.27
  * dns: fix certain txt entries (Fedor Indutny)
  * assert: Ensure reflexivity of deepEqual (Mike Pennisi)
  * child_process: fix deadlock when sending handles (Fedor Indutny)
  * child_process: fix sending handle twice (Fedor Indutny)
  * crypto: do not lowercase cipher/hash names (Fedor Indutny)
  * dtrace: workaround linker bug on FreeBSD (Fedor Indutny)
  * http: do not emit EOF non-readable socket (Fedor Indutny)
  * http: invoke createConnection when no agent (Nathan Rajlich)
  * stream: remove useless check (Brian White)
  * timer: don't reschedule timer bucket in a domain (Greg Brail)
  * url: treat \ the same as / (isaacs)
  * util: format as Error if instanceof Error (Rod Vagg)
- add macros.nodejs</changelog>
<changelog author="nikolai@prokoschenko.de" date="1401278400">- fixes
  * initialization of the next build step was missing in case original node
    headers were to be used in node-gyp</changelog>
<changelog author="i@marguerite.su" date="1405684800">- fix changelog chronologically</changelog>
<changelog author="i@marguerite.su" date="1405684801">- update version 0.10.29
  * openssl: to 1.0.1h (CVE-2014-0224)
  * npm: upgrade to 1.4.10
  * utf8: Prevent Node from sending invalid UTF-8 (Felix Geisendörfer)
  * NOTE* this introduces a breaking change, previously you could construct
    invalid UTF-8 and invoke an error in a client that was expecting valid
    UTF-8, now unmatched surrogate pairs are replaced with the unknown UTF-8
    character. To restore the old functionality simply have NODE_INVALID_UTF8
    environment variable set.
  * child_process: do not set args before throwing (Greg Sabia Tucker)
  * child_process: spawn() does not throw TypeError (Greg Sabia Tucker)
  * constants: export O_NONBLOCK (Fedor Indutny)
  * crypto: improve memory usage (Alexis Campailla)
  * fs: close file if fstat() fails in readFile() (cjihrig)
  * lib: name EventEmitter prototype methods (Ben Noordhuis)
  * tls: fix performance issue (Alexis Campailla)</changelog>
<changelog author="i@marguerite.su" date="1406635200">- fix a typo in macros.nodejs
- explicitly use /usr/lib, %%{_libexecdir} will resolve to
  /usr/lib64 on sles x86_64 versions.</changelog>
<changelog author="javier@opensuse.org" date="1408190400">- Update to version 0.10.30
  * uv: Upgrade to v0.10.28
  * npm: Upgrade to v1.4.21
  * v8: Interrupts must not mask stack overflow.
  * Revert "stream: start old-mode read in a next tick" (Fedor Indutny)
  * buffer: fix sign overflow in `readUIn32BE` (Fedor Indutny)
  * buffer: improve {read,write}{U}Int* methods (Nick Apperson)
  * child_process: handle writeUtf8String error (Fedor Indutny)
  * deps: backport 4ed5fde4f from v8 upstream (Fedor Indutny)
  * deps: cherry-pick eca441b2 from OpenSSL (Fedor Indutny)
  * lib: remove and restructure calls to isNaN() (cjihrig)
  * module: eliminate double `getenv()` (Maciej Małecki)
  * stream2: flush extant data on read of ended stream (Chris Dickinson)
  * streams: remove unused require('assert') (Rod Vagg)
  * timers: backport f8193ab (Julien Gilli)
  * util.h: interface compatibility (Oguz Bastemur)
  * zlib: do not crash on write after close (Fedor Indutny)</changelog>
<changelog author="i@marguerite.su" date="1408708800">- update version 0.10.31
  * v8: backport CVE-2013-6668
  * openssl: Update to v1.0.1i
  * npm: Update to v1.4.23
  * cluster: disconnect should not be synchronous
  * fs: fix fs.readFileSync fd leak when get RangeError
  * stream: fix Readable.wrap objectMode falsy values
  * timers: fix timers with non-integer delay hanging</changelog>
<changelog author="i@marguerite.su" date="1408795200">- workaround for sles</changelog>
<changelog author="jgleissner@suse.com" date="1410350400">- do not install NPM
- use /usr/lib/node_modules instead of /usr/lib64/node_modules even
  on x86_64 (node modules are not binary)
- drop patch: nodejs-lib64path.patch and nodejs-libpath.patch
  * installing in /usr/lib64 doesn't really make sense for non-binary files
- drop patch: node-gyp-addon-gypi.patch and
  nodejs-add_missing_shebang_to_read-package-json.patch
  * they were patching npm files, which is separate now</changelog>
<changelog author="i@marguerite.su" date="1410955200">- update version 0.10.32
  * v8: fix a crash introduced by previous release
  * configure: add --openssl-no-asm flag
  * crypto: use domains for any callback-taking method
  * http: do not send `0\r\n\r\n` in TE HEAD responses
  * querystring: fix unescape override
  * url: Add support for RFC 3490 separators</changelog>
<changelog author="jgleissner@suse.com" date="1412856000">- removed macros.nodejs (moved to nodejs-packaging)</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1421841600">- Add three arches to ExclusiveArch: ppc ppc64 ppc64le
- Add nodejs-v0.10.32-release-ppc.patch.bz2 for them
  (required as PowerPC support not yet upstream)
  (the patch header details how it is created)
- do not configure --with-gdb for those architectures</changelog>
<changelog author="i@marguerite.su" date="1425211200">- update version 0.12.0
  * npm: upgrade to 2.5.1
  * mdb_v8: update for v0.12
- drop nodejs-v0.10.32-release-ppc.patch.bz2
- add nodejs-v0.12.0-release-ppc.patch.bz2
- add README.SUSE.PowerPC to explain how to generate ppc patch</changelog>
<changelog author="dmacvicar@suse.de" date="1426766400">- enable s390x</changelog>
<changelog author="dmueller@suse.com" date="1428062400">- enable aarch64
- add support-arm64-build.patch</changelog>
<changelog author="i@marguerite.su" date="1433505600">- update version 0.12.4
  * npm: upgrade to 2.10.1
  * V8: revert v8 Array.prototype.values() removal
  * win: bring back xp/2k3 support
- previous changes from 0.12.1 to 0.12.3 see ChangeLog</changelog>
<changelog author="i@marguerite.su" date="1435233600">- update version 0.12.5
  * openssl: upgrade to 1.0.1o
  * npm: upgrade to 2.11.2
  * uv: upgrade to 1.6.1
  * V8: avoid deadlock when profiling is active
  * install: fix source path for openssl headers
  * install: make sure opensslconf.h is overwritten
  * timers: fix timeout when added in timer's callback
- add patch: node-gcc5.patch
  * fix gcc 5 version detection</changelog>
<changelog author="i@marguerite.su" date="1437825600">- build with bundled npm</changelog>
<changelog author="i@marguerite.su" date="1438171200">- update version 0.12.7
  * openssl: upgrade to 1.0.1p
  * npm: upgrade to 2.11.3
  * v8: cherry-pick JitCodeEvent patch from upstream
- changes in 0.12.6
  * v8: fix out-of-band write in utf8 decoder
  * fix boo#937414: CVE-2015-5380: nodejs: out of band write</changelog>
<changelog author="i@marguerite.su" date="1445169600">- fixed boo#948602/CVE-2015-7384:
  * nodejs: HTTP Denial of Service Vulnerability
- install missing addon-rpm.gypi (boo#948045)
- update to 4.2.1
  * Includes fixes for two regressions
    + Assertion error in WeakCallback
    + Undefined timeout regression
- changes in 4.2.0
  * icu: Updated to version 56 with significant performance
    improvements
  * node:
    + Added new -c (or --check) command line argument for checking
    script syntax without executing the code
    + Added process.versions.icu to hold the current ICU library
    version
    + Added process.release.lts to hold the current LTS codename
    when the binary is from an active LTS release line
  * npm: Upgraded to npm 2.14.7 from 2.14.4
- changes in 4.1.2
  * http:
    + Fix out-of-order 'finish' event bug in pipelining that can
    abort execution, fixes DoS vulnerability CVE-2015-7384
    + Account for pending response data instead of just the data
    on the current request to decide whether pause the socket
    or not
    + libuv: Upgraded from v1.7.4 to v1.7.5
    + Improved AIX support
  * v8:
    + Upgraded from v4.5.103.33 to v4.5.103.35
    + Backported f782159 from v8's upstream to help speed up Promise
    introspection
    + Backported c281c15 from v8's upstream to add JSTypedArray
    length in post-mortem metadata
- changes in 4.1.1
  * buffer: Fixed a bug introduced in v4.1.0 where allocating a new
    zero-length buffer can result in the next allocation of a
    TypedArray in JavaScript not being zero-filled. In certain
    circumstances this could result in data leakage via reuse of
    memory space in TypedArrays, breaking the normally safe assumption
    that TypedArrays should be always zero-filled.
  * http: Guard against response-splitting of HTTP trailing headers
    added via response.addTrailers() by removing new-line ([\r\n])
    characters from values. Note that standard header values are
    already stripped of new-line characters. The expected security
    impact is low because trailing headers are rarely used.
  * npm:
    + Upgrade to npm 2.14.4 from 2.14.3
    + Upgrades graceful-fs on multiple dependencies to no longer
    rely on monkey-patching fs
    + Fix npm link for pre-release / RC builds of Node
  * v8:
    + Update post-mortem metadata to allow post-mortem debugging
    tools to find and inspect:
    + JavaScript objects that use dictionary properties ScopeInfo
    and thus closures
- changes in 4.1.0
  * buffer:
    + Buffers are now created in JavaScript, rather than C++.
    This increases the speed of buffer creation
    + Buffer#slice() now uses Uint8Array#subarray() internally,
    increasing slice() performance
  * fs:
    + fs.utimes() now properly converts numeric strings, NaN,
    and Infinity
    + fs.WriteStream now implements _writev, allowing for
    super-fast bulk writes
  * http: Fixed an issue with certain write() sizes causing errors
    when using http.request()
  * npm: Upgrade to version 2.14.3
  * src: V8 cpu profiling no longer erroneously shows idle time
  * timers: #ref() and #unref() now return the timer they belong to
  * v8: Lateral upgrade to 4.5.103.33 from 4.5.103.30, contains minor
    fixes. This fixes a previously known bug where some computed
    object shorthand properties did not work correctly.
- changes in 4.0.0
  * child_process: ChildProcess.prototype.send() and process.send()
    operate asynchronously across all platforms so an optional
    callback parameter has been introduced that will be invoked once
    the message has been sent.
  * node: Rename "io.js" code to "Node.js".
  * node-gyp: This release bundles an updated version of node-gyp
    that works with all versions of Node.js and io.js including
    nightly and release candidate builds. From io.js v3 and Node.js
    v4 onward, it will only download a headers tarball when building
    addons rather than the entire source.
  * npm: Upgrade to version 2.14.2 from 2.13.3, includes a security
    update.
  * timers: Improved timer performance from porting the 0.12
    implementation, plus minor fixes.
  * util: The util.is*() functions have been deprecated, beginning
    with deprecation warnings in the documentation for this release,
    users are encouraged to seek more robust alternatives in the
    npm registry.
  * v8: Upgrade to version 4.5.103.30 from 4.4.63.30
    + Implement new TypedArray prototype methods: copyWithin(),
    every(), fill(), filter(), find(), findIndex(), forEach(),
    indexOf(), join(), lastIndexOf(), map(), reduce(),
    reduceRight(), reverse(), slice(), some(), sort().
    + Implement new TypedArray.from() and TypedArray.of() functions.
    + Implement arrow functions
- drop nodejs-openssl-missing-api.patch: it's for 0.9.8.
- ppc/ppc64(le) is natively supported since nodejs 3.0.0.
  so drop nodejs-v0.12.7-release-ppc.patch.bz2
- drop node-gcc5.patch, upstream fixed
- add nodejs-lib64path.patch, adjust libdir
- add nodejs-libpath.patch, adjust libdir
- add node-gyp-addon-gypi.patch
  * use custom addon.gypi by default instead of downloading
    node source
- add node_modules clean up codes</changelog>

</package>
<package pkgid="6f364257207587b6e6c09cd38eb1937a9b577e771d7dea8e57186b81c6349dae" name="open-vm-tools" arch="src">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="a90503323a6e94f7a2c94dcc225a9492893e09a2f65712cfed3b6d42fa12b872" name="open-vm-tools" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="d0a18a38da6d8920cbcdffa76a736322a48fcfdd4bbb0a767b594148ec4ce4c4" name="open-vm-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="d5ffd2c547623e47179ee080e4adf0af49a980a54778cb34523b1ff082e86522" name="open-vm-tools-debugsource" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="50da7aaedff8dd9ad22ed876acedff9111d33b5885cc0049d78f4f2c1ffe489e" name="open-vm-tools-desktop" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="dea3463d14199f7e556606c3cd63246e04a9091fc3ee741245c4950746fc2c8a" name="open-vm-tools-desktop-debuginfo" arch="x86_64">
    <version epoch="0" ver="10.0.0" rel="3.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417262400">- fix bashisms in vmware-user-autostart-wrapper script</changelog>
<changelog author="dimstar@opensuse.org" date="1420459200">- Split building of KMPs into own spec file: open-vm-tools-KMP:
  the resulting KMP packages keep their existing name, as this is
  handled through the kernel_package macros. This split allows to
  work around boo#905420.</changelog>
<changelog author="dimstar@opensuse.org" date="1420459201">- Add open-vm-tools-linux-3.17.7.patch: Fix building of vmhgfs with
  Kernel 3.17.7+.
- Add open-vm-tools-linux-3.18.0.patch: Fix building of vmhgfs with
  Kernel 3.18.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1420804800">- Use fuse-devel instead of pkgconfig(fuse) in SLES11SP4.</changelog>
<changelog author="mlatimer@suse.com" date="1421409600">- Update specfile to ensure kernel modules are not built or required
  for SLES11SP4 and SLES12.</changelog>
<changelog author="mlatimer@suse.com" date="1421841600">- Remove modprobe of deprecated vmsync module from SysV init script.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Add open-vm-tools-linux-3.19.0.patch: Fix building of vmhgfs with
  Kernel 3.19.0+.</changelog>
<changelog author="mlatimer@suse.com" date="1426161600">- Prevent autoinstallation of open-vm-tools in SLES11SP4 environments
  due to potential conflict with VMware tools. (bsc#921618)</changelog>
<changelog author="dimstar@opensuse.org" date="1430827200">- Handle kernel 4.0: we can't just compare the 'minor' part of the
  version anymore when applying patches.</changelog>
<changelog author="mlatimer@suse.com" date="1431950400">- Update to open-vm-tools-9.10.0-2476743:
  + vgauth added
  + deploypkg added
  + guest proxycerttool added
  + hgfs and vmci/vsock fixes
  + asyncsocket enhancements
  + library fixes and improvements
  + locking and logging fixes and improvements
  + foundry fixes
  + vm-support script fixes
- Replace obsolete patches with rebased versions (from ArchLinux):
  - Drop 0001-Remove-unused-DEPRECATED-macro.patch
  - Drop 0002-Conditionally-define-g_info-macro.patch
  - Drop 0003-Add-kuid_t-kgid_t-compatibility-layer.patch
  - Drop 0004-Use-new-link-helpers.patch
  - Drop 0005-Update-hgfs-file-operations-for-newer-kernels.patch
  - Drop 0006-Fix-vmxnet-module-on-kernels-3.16.patch
  - Drop 0007-Fix-vmhgfs-module-on-kernels-3.16.patch
  - Drop 0008-Fix-segfault-in-vmhgfs.patch
  - Drop open-vm-tools-linux-3.17.7.patch
  - Drop open-vm-tools-linux-3.17.patch
  - Drop open-vm-tools-linux-3.18.0.patch
  - Add 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - Add 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - Add 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
- Add libmspack BuildRequires (deploypkg).
- Add openssl BuildRequires (grabbitmqproxy and vgauth).
- Compile using --without-xmlsecurity and --without-xerces as
  pkgconfig(xml-security-c) is not yet available in the build service,
  (disables vgauth support).
- Disable deploypkg for older versions of SLES and openSUSE.
- Disable ssl for older versions of SLES and openSUSE (disables
  grabbitmqproxy and vgauth).
- Update spec file to be compatible with SLES and openSUSE.</changelog>
<changelog author="mlatimer@suse.com" date="1432209600">- Build using gcc4.7 for SLES11 environments to avoid mul64.h
  dependency problem for i586 architectures
- Include cstddef to resolve compile problems under gcc4.7
  enable-gcc46+.patch
- Ensure xutils builds properly under older versions of gcc
  xutils-add-cstring.patch
- Prevent files on shared folders from being truncated to 0 bytes
  under 4.0 kernel
  0004-vmhgfs-bdi-kernel-4.0.patch</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix compilation issues with GCC 5:
  * Add toolboxcmd-fix-logic.patch
  * Add asm_x86.patch</changelog>
<changelog author="mlatimer@suse.com" date="1436788800">- Update to open-vm-tools-9.10.2-2822639
  + Fix various compilation errors
  + Retry sending vmbackup event with elevated privileges
  + Add a -h option to vgauth
  + Workaround NFS open bug by retrying on ESTALE
  + Fix the HGFS protocol opcode to differentiate headers
  + Thaw filesystems when the snapshot commit message to VMX fails
- Drop upstream patches included in 9.10.2:
  - toolboxcmd-fix-logic.patch
  - asm_x86.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1439208000">- Drop KMP related .spec and .changes file (bsc#938593) (for now
  we keep the logic in the .spec file, in case we want to resurrect
  it).</changelog>
<changelog author="dimstar@opensuse.org" date="1439380800">- For SLE11, the KMP is still required; the .spec file logic is
  now only enabled in the linked package, the 2nd spec file must
  not be part of the main package open-vm-tools (as Factory would
  immediately create the linked package, which would fail building
  with Linux 4.x) (boo#941384).</changelog>
<changelog author="mlatimer@suse.com" date="1441195200">- Do not attempt to start vmware-vmblock-fuse if vmware-vmblock-fuse
  (included with the -desktop package) is not installed (bsc#943236)</changelog>
<changelog author="mlatimer@suse.com" date="1441281600">- Update to open-vm-tools-10.0.0-3000743  (boo#944615)
  + Common versioning
  + Quiesced snapshots enhancements for Linux guests running IO workload
  + Shared Folders (Linux kernel 4.0.0 and higher only)
  + ESXi Serviceability
  + GuestInfo Enhancements
  + Internationalization, with support for:
    + English
    + French
    + German
    + Spanish
    + Italian
    + Japanese
    + Korean
    + Simplified Chinese
    + Traditional Chinese
  + Compatibility with all supported versions of VMware vSphere, VMware
    Workstation 12.0 and VMware Fusion 8.0
- Drop upstream patches included (or not necessary) in 10.0.0:
  - 0001-Fix-vmxnet-module-on-kernels-3.16.patch
  - 0002-Fix-d_alias-to-d_u.d_alias-for-kernel-3.18.patch
  - 0003-Fix-f_dentry-msghdr-kernel-3.19.patch
  - 0004-vmhgfs-bdi-kernel-4.0.patch
  - xutils-add-cstring.patch
- Remove vmhgfs define to ensure vmhgfs is always built
- Only build kernel modules for versions &lt;= openSUSE 13.2</changelog>
<changelog author="mlatimer@suse.com" date="1441800000">- Enable certificate-based access control via SAML tokens (vgauth) on
  openSUSE Factory.</changelog>
<changelog author="mlatimer@suse.com" date="1445515200">- Remove vgauth requirements from vmtoolsd.service file if vgauth
  is not enabled.
- Remove gcc4.7 requirement for older environments.</changelog>
<changelog author="mlatimer@suse.com" date="1446206400">- Enable vgauth for openSUSE Leap 42.1 (bsc#952645)</changelog>

</package>
<package pkgid="76f20bb477594e43b14795cb25e3c7e3995d5e5493190e742e35bdb890dcb6ef" name="permissions" arch="src">
    <version epoch="0" ver="2015.09.28.1626" rel="5.1"/>

<changelog author="meissner@suse.com" date="1371038400">- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)</changelog>
<changelog author="meissner@suse.com" date="1376654400">- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948)</changelog>
<changelog author="meissner@suse.com" date="1376654401">- use PERMISSION_FSCAPS</changelog>
<changelog author="meissner@suse.com" date="1377086400">- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)</changelog>
<changelog author="meissner@suse.com" date="1377172800">- do not use magic constants for strlen (bnc#834790</changelog>
<changelog author="meissner@suse.com" date="1382961600">- GIT repo moved to GITHUB.
- removed the setuid bit from "eject" (bnc#824406)</changelog>
<changelog author="krahmer@suse.com" date="1395662400">- permissions: incorporating capability for mtr, removing +s from ping
  (bnc#865351)</changelog>
<changelog author="meissner@suse.com" date="1397563200">- duplicate /var/run entries to /run (bnc#873708)</changelog>
<changelog author="meissner@suse.com" date="1401969600">- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)</changelog>
<changelog author="meissner@suse.com" date="1402920000">- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)</changelog>
<changelog author="meissner@suse.com" date="1404216000">- vlock_main lost its permission checking, so remove from here.</changelog>
<changelog author="krahmer@suse.com" date="1405944000">- permissions: Adding new kdesud path for KDE5 (bnc#872276)</changelog>
<changelog author="meissner@suse.com" date="1406116800">- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)</changelog>
<changelog author="meissner@suse.com" date="1406894400">- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)</changelog>
<changelog author="meissner@suse.com" date="1415188800">- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647</changelog>
<changelog author="krahmer@suse.com" date="1417608000">- Added iouyap capabilities (bnc#904060)</changelog>
<changelog author="meissner@suse.com" date="1433764800">- remove /usr/bin/get_printing_ticket; (bnc#906336)</changelog>
<changelog author="meissner@suse.com" date="1443441600">- radosgw can get capability cap_bind_net_service (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1443441601">- adjusted radosgw to root:www mode 0750 (bsc#943471)</changelog>

</package>
<package pkgid="dcd52c59a8b897c744182a4c8fd227659d5ff136f58ac00e014d402af8ad2076" name="permissions" arch="x86_64">
    <version epoch="0" ver="2015.09.28.1626" rel="5.1"/>

<changelog author="meissner@suse.com" date="1371038400">- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)</changelog>
<changelog author="meissner@suse.com" date="1376654400">- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948)</changelog>
<changelog author="meissner@suse.com" date="1376654401">- use PERMISSION_FSCAPS</changelog>
<changelog author="meissner@suse.com" date="1377086400">- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)</changelog>
<changelog author="meissner@suse.com" date="1377172800">- do not use magic constants for strlen (bnc#834790</changelog>
<changelog author="meissner@suse.com" date="1382961600">- GIT repo moved to GITHUB.
- removed the setuid bit from "eject" (bnc#824406)</changelog>
<changelog author="krahmer@suse.com" date="1395662400">- permissions: incorporating capability for mtr, removing +s from ping
  (bnc#865351)</changelog>
<changelog author="meissner@suse.com" date="1397563200">- duplicate /var/run entries to /run (bnc#873708)</changelog>
<changelog author="meissner@suse.com" date="1401969600">- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)</changelog>
<changelog author="meissner@suse.com" date="1402920000">- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)</changelog>
<changelog author="meissner@suse.com" date="1404216000">- vlock_main lost its permission checking, so remove from here.</changelog>
<changelog author="krahmer@suse.com" date="1405944000">- permissions: Adding new kdesud path for KDE5 (bnc#872276)</changelog>
<changelog author="meissner@suse.com" date="1406116800">- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)</changelog>
<changelog author="meissner@suse.com" date="1406894400">- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)</changelog>
<changelog author="meissner@suse.com" date="1415188800">- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647</changelog>
<changelog author="krahmer@suse.com" date="1417608000">- Added iouyap capabilities (bnc#904060)</changelog>
<changelog author="meissner@suse.com" date="1433764800">- remove /usr/bin/get_printing_ticket; (bnc#906336)</changelog>
<changelog author="meissner@suse.com" date="1443441600">- radosgw can get capability cap_bind_net_service (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1443441601">- adjusted radosgw to root:www mode 0750 (bsc#943471)</changelog>

</package>
<package pkgid="0378e18d196ce6c1cc3b03deaa895ca0c2690bf1b4094f4c38656268e7ba148c" name="permissions-debuginfo" arch="x86_64">
    <version epoch="0" ver="2015.09.28.1626" rel="5.1"/>

<changelog author="meissner@suse.com" date="1371038400">- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)</changelog>
<changelog author="meissner@suse.com" date="1376654400">- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948)</changelog>
<changelog author="meissner@suse.com" date="1376654401">- use PERMISSION_FSCAPS</changelog>
<changelog author="meissner@suse.com" date="1377086400">- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)</changelog>
<changelog author="meissner@suse.com" date="1377172800">- do not use magic constants for strlen (bnc#834790</changelog>
<changelog author="meissner@suse.com" date="1382961600">- GIT repo moved to GITHUB.
- removed the setuid bit from "eject" (bnc#824406)</changelog>
<changelog author="krahmer@suse.com" date="1395662400">- permissions: incorporating capability for mtr, removing +s from ping
  (bnc#865351)</changelog>
<changelog author="meissner@suse.com" date="1397563200">- duplicate /var/run entries to /run (bnc#873708)</changelog>
<changelog author="meissner@suse.com" date="1401969600">- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)</changelog>
<changelog author="meissner@suse.com" date="1402920000">- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)</changelog>
<changelog author="meissner@suse.com" date="1404216000">- vlock_main lost its permission checking, so remove from here.</changelog>
<changelog author="krahmer@suse.com" date="1405944000">- permissions: Adding new kdesud path for KDE5 (bnc#872276)</changelog>
<changelog author="meissner@suse.com" date="1406116800">- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)</changelog>
<changelog author="meissner@suse.com" date="1406894400">- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)</changelog>
<changelog author="meissner@suse.com" date="1415188800">- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647</changelog>
<changelog author="krahmer@suse.com" date="1417608000">- Added iouyap capabilities (bnc#904060)</changelog>
<changelog author="meissner@suse.com" date="1433764800">- remove /usr/bin/get_printing_ticket; (bnc#906336)</changelog>
<changelog author="meissner@suse.com" date="1443441600">- radosgw can get capability cap_bind_net_service (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1443441601">- adjusted radosgw to root:www mode 0750 (bsc#943471)</changelog>

</package>
<package pkgid="ae1cc815ddbe737028cba0aa93bf719a2e6f1a30532d69c7d0d9d95c4a05bf87" name="permissions-debugsource" arch="x86_64">
    <version epoch="0" ver="2015.09.28.1626" rel="5.1"/>

<changelog author="meissner@suse.com" date="1371038400">- utempter helper binary moved in new version to /usr/lib/utempter/utempter (bnc#823302)</changelog>
<changelog author="meissner@suse.com" date="1376654400">- it is PERMISSIONS_FSCAPS (bnc#834790)
- qemu-bridge-helper has no special privileges currently (bnc#765948)</changelog>
<changelog author="meissner@suse.com" date="1376654401">- use PERMISSION_FSCAPS</changelog>
<changelog author="meissner@suse.com" date="1377086400">- Chrome sandbox also allowed to be setuid root in secure mode now (bnc#718016)</changelog>
<changelog author="meissner@suse.com" date="1377172800">- do not use magic constants for strlen (bnc#834790</changelog>
<changelog author="meissner@suse.com" date="1382961600">- GIT repo moved to GITHUB.
- removed the setuid bit from "eject" (bnc#824406)</changelog>
<changelog author="krahmer@suse.com" date="1395662400">- permissions: incorporating capability for mtr, removing +s from ping
  (bnc#865351)</changelog>
<changelog author="meissner@suse.com" date="1397563200">- duplicate /var/run entries to /run (bnc#873708)</changelog>
<changelog author="meissner@suse.com" date="1401969600">- tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)</changelog>
<changelog author="meissner@suse.com" date="1402920000">- opiesu,wodim,vlock-main have no setuid root. (bnc#882035)</changelog>
<changelog author="meissner@suse.com" date="1404216000">- vlock_main lost its permission checking, so remove from here.</changelog>
<changelog author="krahmer@suse.com" date="1405944000">- permissions: Adding new kdesud path for KDE5 (bnc#872276)</changelog>
<changelog author="meissner@suse.com" date="1406116800">- make innbind mode 4550  (bnc#876287)
- permissions: Adding systemd-journal directory (bnc#888151)</changelog>
<changelog author="meissner@suse.com" date="1406894400">- append a / to /var/log/journal so the framework makes sure it is a directory bnc#888151</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Do not applies permissions from backup files (~ / .rpmsave / .rpmnew) (bnc#893370)
- do not mention SuSEconfig anymore, long dead (bnc#843083)</changelog>
<changelog author="meissner@suse.com" date="1415188800">- %{_bindir}/get_printing_ticket turned to mode 700, setuid root no longer needed (bnc#685093)
- permissions: incorporating squid changes from bnc#891268
- hint that chkstat --system --set needs to be run after editing bnc#895647</changelog>
<changelog author="krahmer@suse.com" date="1417608000">- Added iouyap capabilities (bnc#904060)</changelog>
<changelog author="meissner@suse.com" date="1433764800">- remove /usr/bin/get_printing_ticket; (bnc#906336)</changelog>
<changelog author="meissner@suse.com" date="1443441600">- radosgw can get capability cap_bind_net_service (bsc#943471)</changelog>
<changelog author="meissner@suse.com" date="1443441601">- adjusted radosgw to root:www mode 0750 (bsc#943471)</changelog>

</package>
<package pkgid="36eb92dd017d0ff3fbf30ff0640da8bbcff332628304c832eeb0cf88f6bf208f" name="php5" arch="src">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="da5303a25ad16c0fc2f6d0a59160126743c19d9baf448307dd68b6a632b25637" name="php5" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="7397c6d3dbc87d883cae2a4d0f8cc34757a044ac3597e298d5ed7aa8587a9ebd" name="php5-bcmath" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="1bd5cb6dc1405ac60a3e1975f8f9c1f890d7dffbf5837c1659943c0c7da88895" name="php5-bcmath-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="e706355b16c2d520c7f4b05c414b4de13cabf8377884362cf987d96eb5cfa235" name="php5-bz2" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="d531f7dc50ede2383ca1b864bf302d4da8e2d19c2f1a72828cfce501a14c742a" name="php5-bz2-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="72f7deb6bf283449891ed25a9939279541b2d33e3948805a0397081bfe8b520a" name="php5-calendar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="1b828b7ca69ba7a6c930830224c0d14d7b034d112867329965cd2b23fed7b124" name="php5-calendar-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="393d507d0cfda5bc1659e099e6aae245c67a3595ab42958f8c6740ab4b84b105" name="php5-ctype" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="91d5d59d47d2b240dc574e8a25d4fe15e35030ef19fecf933fcfcb7942f4125a" name="php5-ctype-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="07a1595c8a6a2a923b675d33cf8bd06f2d60c077a5bca8b331ad1017b17cfb8a" name="php5-curl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="76c54abc4a582895ace2778a1e5fa0c17e325faea92be865b0416cb44ebdd6ec" name="php5-curl-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="a1da17cb686ea32e7fe96098dcfba0efb6128d393b64bac98f012aa8f2e51dc1" name="php5-dba" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="726f5e32f4c140efec2d288d366794cac37d866e784a6dbbb84fe13b385b9572" name="php5-dba-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="3b05c6a43e4327d09126c3b7da112cd85a3ec96944a366415ba9a5308265abd3" name="php5-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="ef010d98064f2ad94d158486605eb1c60f3c82fe07a9f06bb5c5e13808484409" name="php5-debugsource" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="2c97996ce1705bca1a95936814722154f3efe101e417c8333f565d5c4d116ef8" name="php5-devel" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="16630416a2a96808575d28722a968dc0ea80297b59e5b9271ecc7584948b7c2d" name="php5-dom" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="1d6fc87dd211a0248c22c4c56655fb09717cf42d8e00f60119ef97406cab2c67" name="php5-dom-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="d33cac81200545c4f8a14a8b215d08e70fe2cd0246550d87548e483b6afe74bd" name="php5-enchant" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="8ad4e3a0a8efd1665d2079801c9ab4dcf1d701d9c760944e8ab6e441a0b9e6cf" name="php5-enchant-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="8c16eb1cce2eabedf8e5686576f96c3b744ef19edfb96e73b6f2cf539559ba68" name="php5-exif" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="01ede7df87870fb9a90bbc74f031c4285c8b55e9ad8596a86ef15a3c8f308cc3" name="php5-exif-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="15cb2384a14d6bc186312741746b3e87198c269f514583d85588b3c0d210769a" name="php5-fastcgi" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="ea736f14278f934c72a2e208061c6ad36118b322a5d45e8c8e3f25f5731e0c26" name="php5-fastcgi-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="68714bb75b79362201e543dc39ec6844cf8d69a375bd1463c0058fd5905d149c" name="php5-fileinfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="e7a4f6a6a872f34ad5913fb0fc68a337cf6b3352feee8c04399db8c5b1b14e76" name="php5-fileinfo-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="ad85a3c92264f20f8ca171af923ba30fa9631c4416478bdd3bbcea8251b396c2" name="php5-firebird" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="4030ecd2c47bca943e60f39a6da0454d1f66253c3ef8c8a159e8308552ad6eab" name="php5-firebird-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="58947aa89e7c3205a0356269d52d185781e56de8bf0bebdbf583a95c64493d2c" name="php5-fpm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="b5393b06a4052bcbd85e1e579280629e7b30813f68215bad66d7c3050035bcd5" name="php5-fpm-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="53472b4e6167567ab59fa5d1e16d0048b7e35f7457f66bdacb9a0455f687caf3" name="php5-ftp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="adb0cc0b11770b1bff5e59b1d10a93f5b1888a01e998178b816b6ca5b831c34d" name="php5-ftp-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="2daf1c70b4e2c5145883975bcd962fe9a0c40b02981a41105cabdeacd6356845" name="php5-gd" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="2c86f228ff5164ba307b0119a61debf8b8624756367541edd1fa826d846a514d" name="php5-gd-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="89fd141075b53a19f34e0700b4992318f91fb827a5663bc382f310ada052e5e4" name="php5-gettext" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="9890b97c540d8dd8fd9467f16aa91c90379b8f731a7a56fc83e30fab452e78c5" name="php5-gettext-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="7403551365aad827396bc3bed15629e85464c0dd467db7cb33ac9f7b5a5b5a43" name="php5-gmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="387dc3207e0a3dd1108a1f8142d222f05b232839bc4b8c84313c33b1f5d95baa" name="php5-gmp-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="ad9564d2186d40ede6367724ceeeb0148cdef21db763f5a42da39f9c4f2978f2" name="php5-iconv" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="4b3dbdd00d9b0f2d23a523724f370a8530f8c0aa2ff3de40b09ea469a8f4ac7a" name="php5-iconv-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="b896fe2c9c7331c694097c5bf7b7d6ae51e5f35c1dcc2c98b9e5c837979cd244" name="php5-imap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="e3cd9d8001c0784b12de0fcb4ffd66ee0c7aad72d2b17a2a8cac487c436da479" name="php5-imap-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="873aca62bd08bfccfeef276fad368dbc89fd8d29645aec468e726eee3d8e5835" name="php5-intl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="c66be05807a386f43bfe42efb19bfc3f821f26eb65efd183f86618e34db10286" name="php5-intl-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="a5d6f38e571cc557156b9895fdd09ccb5887f133d4ce7018b5695df3a2653a12" name="php5-json" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="68377163c819997db8e61db102fc4ccdf2ba4fcf866e4a8700ceabf1d5fd0c33" name="php5-json-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="3bb6de3bd5a727a347ce70eaff916bb0aa73bc126c0360907e95feafad81b968" name="php5-ldap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="a8e64e45978fb4364f602b58ea5ad9bc4f02ed55b28468982f69ccda8d034017" name="php5-ldap-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="57da2792c7218ec97c02a35c92b4d2f8cf8250abc306c4ff606a12046628dd24" name="php5-mbstring" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="fb4a1a2232d475df5b357bfe244cc65d2873642073a98ada4da63c657d841c08" name="php5-mbstring-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="54989442327741e10512c588186993d1d2b31900c49f4f68498bd663831f16b8" name="php5-mcrypt" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="5f2fde0a10a073f9802099787f451af434c70c2d9291e93a86bb3ae7f8c0ca51" name="php5-mcrypt-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="f9a2e9df3b62d5e319b13c396fbcd436032ffe643c71a56dad012bc74b6ec5ed" name="php5-mssql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="17278ce72bc30dfeec87c36a999d036b31618015d0c11c11a18d8401c7003144" name="php5-mssql-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="74baaa235d8b3b91a0b2cd15a3aaa736d6d687b95eb53a0dae0410c7cf5f7324" name="php5-mysql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="6145a86df96a314e665920d8d2f709f3cf65f3ef92253eef60fdd17228b16c90" name="php5-mysql-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="4c5aea20530a1d1f4e168111ff23046d053e5b09222abe7b00196c480e677bf6" name="php5-odbc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="b493955f2eef9eee2ee1e9fd427f8fef20f8431b87bae5391ff5c8e2c8819962" name="php5-odbc-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="d4ada762fcde82d132f8d9854d054357ebeeb0df45adc8610f4ee001042e8e44" name="php5-opcache" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="6529713e87914cfb1f4263c2941ee9f63d20c5855c40718847844e163d884672" name="php5-opcache-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="52571ef2bd088974ba408fda4b0fd3db75e1532e2b974a90d0c2e034ca80b721" name="php5-openssl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="27157f7a8c6012a8a7e7096d6cbec722d2f0494a50e1f294fd7578e964451a09" name="php5-openssl-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="43010d4cf468ab5a314f8e97e92e6dda252c774bb1c2f102a75c84d7b7100c38" name="php5-pcntl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="1ffa31b72f6e9b5db0389ea19368dd30f8a751fc23595bac92e8f5e6df2df0b0" name="php5-pcntl-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="2c1e385a513dfc6270e3e36c460163d131b4bef7fc674d8622ea1f7b08957d01" name="php5-pdo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="c62dfa1448a5b3cdabc4b502e8d1c1bba2dc11fc30163ee306915971b232993f" name="php5-pdo-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="c8baf3f779c58662b15870de999e489a2a70d3585101b017febce1e8e676f699" name="php5-pear" arch="noarch">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="0547efd65ad3f158a71b429a0dede3cfdd0ff23c3d480f29de3c2a2131634cd4" name="php5-pgsql" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="b6caab30ef0da2ccc00ad985f50fcba58927763b2a7106d191a8035e5e7a9f36" name="php5-pgsql-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="ba2b2f2e0377431ee6e64ad4fde3b1f10c6ce5928113dc0a878b09df451a5c60" name="php5-phar" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="51af6a6ff4082b8e990d65f04d57297a1adcbb4bc52e839bcc51d14a743737bc" name="php5-phar-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="e03a48b18c82acf5315f6ec9da008ad510f4d0d657b8332ee53561876277da50" name="php5-posix" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="480e4042e1ed89e28f2da8df3e0eb3f01f9b14f06ff8edea9e121f3819751c01" name="php5-posix-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="415f835cca613cf158fe571423b8fe11c5cc5b2a08bb3e4786717d97af8ad0a8" name="php5-pspell" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="3c4ed8049b3c7fb5aadce970ed217aa07f7b0038c59e83f754770173095759eb" name="php5-pspell-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="34c615b31d150c25c9f359788c26530f681cf71f00a9b26314d901ca7030440b" name="php5-readline" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="389d0e353a55dedcdeab15f350f33f46ab191cdc87d87a6be8daf7e01164ece7" name="php5-readline-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="73b7feef0da1947b528c90199d21a1f915791b986f4404dacfd30ca00bcfdc27" name="php5-shmop" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="93f9551b83ad3c3929d29f249f8f0c4b43cf826cc2c882d2ba078e1daa2add93" name="php5-shmop-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="3ab4546206a21debf14031f36594796f2ed08bbe7aeccc74e7323e5e3c34782b" name="php5-snmp" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="01fd8105bf00387d89d0bd16fa273908559742c6c4d427070c467cffecb78109" name="php5-snmp-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="c2fbfe7636d3538e47f3e052aa0759233ee4e22aafd2b8eaf4eff4514a3e5eef" name="php5-soap" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="561d6663333f5f1688e1cffd0e4a7603245b5d720f8cc48db630c1919c1c9838" name="php5-soap-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="1b7b943536d8e6a83bb444aaadeb5e459f1c797d81ee36dce53d1edb5d7f61c2" name="php5-sockets" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="31e2496e18459cbe6845db768f3c54772fb42f8de0471833ade30136842f36a4" name="php5-sockets-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="9f9bbe549aa342282485aa0a93fb266580e66f24a560299f43b3fb4f907c8789" name="php5-sqlite" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="1ca232a6f7b0e5f939e31ba821fc231f5f0038579957918054c7222a92fff617" name="php5-sqlite-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="7aaeea92e1aa94ba3d6a40ddb78edbd906cedcfc3cd12c4b227b658332356a8c" name="php5-suhosin" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="21528a97eead08c99cc46df051e71556318ca7b00aedf8bac422c6e893818700" name="php5-suhosin-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="7e60352f5c4ffe760ea7a75261afe7dba0636ec4af028a7bdc0c8b35cadd35b0" name="php5-sysvmsg" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="ac32dd437015321783391edf79c44591bdf8b1af0eeb5c02c0ec3967d3049e52" name="php5-sysvmsg-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="1d3029590ccc87fdcb6a77ca7ae915c306cdc1db9ac42ee604177664932d7804" name="php5-sysvsem" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="735528c3fc2b847a8d338e3dac4528efa8cce3edb6a28845f5b4ef2a0a684e21" name="php5-sysvsem-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="f415a935c0dc2e2cb29795de0c3821d0ddd7a7cebb72f9ab483be1a0b3caa0f5" name="php5-sysvshm" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="de679a98d8d1f2dffaec82787db599dcfc4f059b6acc9b56a7bed736ddf830d7" name="php5-sysvshm-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="c54d7630b07f331ecdbac88b23b7f5ed134120db25499afa495542b7acf1a6c1" name="php5-tidy" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="7522f0991ba3cfc5c3c99ee20a7c0dcc956c2d6b6c89d8bde733071fcb6b525e" name="php5-tidy-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="c391145cfccd6715b8b776bea036a0a89c0c17263a0d30f01e6523dd98ec0d9c" name="php5-tokenizer" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="b1ba9d843a7a3adef39b7a4119ea0471f6618f3a89ee910062f694afa39053ad" name="php5-tokenizer-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="c1ec9e08e444068294bd2e06d91d0f04dd1a19d20636c98a4399c0df9102b577" name="php5-wddx" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="7220388a1a975b2a32c875d4806e845968b944e5026094f2e080cee3ce4fadff" name="php5-wddx-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="922762203a9a7c8b66f42bd21c70e9606fd142c0163cd12cb29af05af8c44319" name="php5-xmlreader" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="4f3b0a40fb2ee71d3cdd561ad0ba89b58e47844a1997191bf5ec4695038b46b5" name="php5-xmlreader-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="036d6c9822075bf77d2b9f30f1425991cd3c8702e0816c6a192ac0eb5cdaae0f" name="php5-xmlrpc" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="70a867d297a08b3b1f519d18b669925fe6774a2434e81116f5af0295446bd7f1" name="php5-xmlrpc-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="727bcb933962517ebffe9735bfd8eeaf89cc8c5ebc51346c6b51c1ec7e7df1ff" name="php5-xmlwriter" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="6a8131b23a998a91513c8f47b6ec5ffc16c6bc3ff6e57ae056d25a113c1b9bb8" name="php5-xmlwriter-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="b26947517882f932dec57a5c2e66cf5cb373ae73c2050c6dde7b9dc6b6f7c7b1" name="php5-xsl" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="f2bdd918ca11768451b337a21c887c0e50ad1bfe28b4453b5bc7ec6fb4e10bc5" name="php5-xsl-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="e896bf0bd56279fe6fd2e7b0cd4f6b3573273ec0d636c2d0183a650da4edce02" name="php5-zip" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="89553e28dc35c5ecdf51d131364abe4f9d8783f2dabfbb70655c76ab1af8e8f7" name="php5-zip-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="e04bfac9e0f77ed81effecd041722f92a28c05e6418063fbe852c7911e5289b4" name="php5-zlib" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="894c07de199a870f4984ca44590302b2cbb6e003c80127d7c74c848c8ab7e3cd" name="php5-zlib-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.5.14" rel="38.1"/>

<changelog author="pgajdos@suse.cz" date="1404129600">- updated to 5.5.14: This release fixes several bugs against
  PHP 5.5.13. Also, this release fixes a total of 8 CVEs,
  half of them concerning the FileInfo extension.
- removed CVE-2014-4049.patch (upstreamed)</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
- php-5.5.10-CVE-2014-2497.patch renamed to php-CVE-2014-2497.patch
  i</changelog>
<changelog author="pgajdos@suse.com" date="1406721600">- fixed crash when throwing and handling an exception in one
  finally block [bnc#868098]
- that breaks Zend ABI 20121212
- added patches:
  * php5-finally-exception-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1409313600">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433332800">- fix timezone map [bnc#919080]</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1433764800">- configure php-fpm with --localstatedir=/var [bnc#927147]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    + php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935277],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1440676800">- updated suhosin to 0.9.38 [fate#319325]
  * removed php5-suhosin-php55.patch</changelog>
<changelog author="abergmann@suse.com" date="1441627200">- added php5-fix_net-snmp_disable_MD5.patch:
  If MD5 was disabled in net-snmp we have to disable the used MD5
  function in ext/snmp/snmp.c as well. (bsc#944302)</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">-  security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch
- compare with SQL_NULL_DATA correctly [bnc#935074]
  + php-odbc-cmp-int-cast.patch</changelog>
<changelog author="pgajdos@suse.com" date="1444219200">- revert upstream change in suhosin.ini -- suhosin extension is
  loaded by default [bnc#949134]
  + php-suhosin.ini.patch</changelog>

</package>
<package pkgid="af2cbbd4e8106ff5c46f3fd37bd986c5199ea0b2616193504c4051e7a8e9b999" name="phpMyAdmin" arch="noarch">
    <version epoch="0" ver="4.4.15.1" rel="3.1"/>

<changelog author="ecsos@opensuse.org" date="1430049600">- update to 4.4.4 (2015-04-26)
  - sf#4863 Edit vs Change
  - sf#4859 Don't scroll (to bottom) when editing multiple rows
  - sf#4862 Misaligned Inline edit field
  - sf#4861 Use of undefined constant PMA_DRIZZLE
  - sf#4865 sprintf(): Too few arguments
  - sf#4866 Limit column ordering in index edit dialog
  - sf#4867 Incorrect ALTER TABLE statement generated
  - sf#4870 Inconsistency in 'Ignore' checkbox in insert page
  - sf#4869 Drop column action not asking to confirm
  - sf#4871 Error on creating table
  - fix bug Undefined index: Rows</changelog>
<changelog author="ecsos@opensuse.org" date="1430827200">- update to 4.4.5 (2015-05-05)
  - fix bug Table overhead stats: missing space before the unit
  - fix bug Fix resize icon in Designer
  - sf#4879 Exit fullscreen in Designer does not change
    the button text
  - sf#4880 Designer icons missing when using original theme
  - sf#4878 Column list of central columns is not cleared
  - sf#4881 jQuery dialogs of the Designer are not displayed in
    fullscreen
  - sf#4883 Search function breaks when searching for certain
    combinations of backslashes and slashes
  - sf#4830 Maximum execution time exceeded in Util.class.php
    (better fix)
  - sf#4885 Some icons are above the overlay of jQuery dialogs
  - sf#4886 Clicking on external links in advisor rules give
    JS error
  - sf#4888 Filter in central columns does not work in other
    languages</changelog>
<changelog author="ecsos@opensuse.org" date="1431000000">- update to 4.4.6 (2015-05-07)
  - sf#4890 webkitStorageInfo and webkitIndexedDB is deprecated
  - sf#4892 Undefined variable: unique_conditions
  - sf#4891 CSV Import ignores "Replace table data with file"
    checkbox</changelog>
<changelog author="ecsos@opensuse.org" date="1431518400">- update 4.4.6.1 (2015-05-13)
  This update fixes several vulnerabilities
- Security fixes:
  * PMASA-2015-2 (CVE-2015-3902, CWE-661 CWE-352)
    http://www.phpmyadmin.net/home_page/security/PMASA-2015-2.php
  - sf#4899 [security] CSRF vulnerability in setup
  * PMASA-2015-3 ( CVE-2015-3903, CWE-661 CWE-295)
    http://www.phpmyadmin.net/home_page/security/PMASA-2015-3.php
  - sf#4900 [security] Vulnerability allowing man-in-the-middle
    attack</changelog>
<changelog author="ecsos@opensuse.org" date="1431777600">- update to 4.4.7 (2015-05-16)
  - sf#4876 Settings issues (Favorite tables shown twice in
    Settings)
  - sf#4896 Non-styled error page when following results link
  - sf#4894 Deleting without confirmation
  - sf#4858 Issues with SQL autocomplete
  - sf#4897 Column hint in SQL autocomplete is sometimes not shown
  - sf#4898 JS error after selecting a field and press Enter
  - fix bug Honor proxy settings when getting Git commit
    information
  - fix bug Missing title on link
  - sf#4512 ForceSSL Redirect Check
  - fix bug Undefined index collation_connection
  - fix bug Error when the reporting server is down
  - fix bug Escape database and table names for partition
    maintenance
  - fix bug Invalid value for CURLOPT_SSL_VERIFYPEER
  - sf#4367 Import status infinite loop
  - sf#4902 Designer: Loading does not work
  - sf#4904 Setup: Overview &gt; Display does not work
  - sf#4906 Designer: pages from all databases</changelog>
<changelog author="ecsos@opensuse.org" date="1432814400">- update to 4.4.8 (2015-05-28)
  - fix bug Allow accessing visual query builder when pmadb is not
    configured
  - sf#4893 Nav tree line alignment issue
  - sf#4911 Lock page icon is not shown after fresh reload
  - sf#4912 "Highlight pointer" and "Row marker" doesn't work
    properly
  - fix bug Browse foreigners window goes out of the window
  - sf#4918 Date field popup dialog position bug
  - fix bug In /setup, PMA_messages is not defined
  - sf#4924 Recaptcha failure
  - sf#4930 Database copy doesn't work for tables with more than
    one FULLTEXT index
  - sf#4929 Edit view structure doesn't load the algorithm
  - sf#4923 Do not limit table comments to 60 characters</changelog>
<changelog author="ecsos@opensuse.org" date="1433505600">- update to 4.4.9 (2015-06-04)
  - sf#4920 relation view doesn't list fields of table in other
    database
  - sf#4905 Sorting by an alias
  - sf#4931 False error before entering reCAPTCHA
  - sf#4909 central column with multiple server
  - sf#4937 Custom export with backquotes off is not working
  - sf#4908 Reverse proxy: infinite internal redirect
    (added warning in doc)
  - sf#4942 Export to gzip saves plain text under Chrome</changelog>
<changelog author="ecsos@opensuse.org" date="1434542400">- update to 4.4.10 (2015-06-17)
  - sf#4950 Issues in database selection for replication
  - sf#4951 Trying to save chart as image crashes the browser
  - sf#4953 cant drag sql.gz file onto import input
  - sf#4960 Table creation results in GET request with missing
    server parameter that invalidates the session
  - sf#4961 Javascript error when Designer is opened
  - sf#4962 Insert by foreign key scrolls page to top
  - sf#4955 Clicking on the navi logo does not always work
  - fix bug External URL for $cfg['NavigationLogoLink'] causes
    JavaScript error when clicked</changelog>
<changelog author="ecsos@opensuse.org" date="1434542401">- add missing sql-scripts to doc</changelog>
<changelog author="mcihar@suse.cz" date="1435838400">- switch upstream url to https
- include signed release together with keyring to verify signatures</changelog>
<changelog author="ecsos@opensuse.org" date="1436356800">- update to 4.4.11 (2015-07-06)
  - fix bug Missing selected/entered values when editing active
  options in visual query builder
  - sf#4969 Autoload from prefs_storage not behaving properly
  - sf#4972 Incorrect length computed for binary data
  - fix bug Remove character set from create_tables_drizzle.sql
  - sf#4973 Users overview needs clarification
  - sf#4974 Creating a database from console doesn't update
    navigation panel
  - sf#4844 FAQ 1.17 needs an update
- change sourcepath in spec</changelog>
<changelog author="mcihar@suse.cz" date="1437393600">- update to 4.4.12 (2015-07-20)
  - Saved chart image does not have a proper name or an extension
  - sf#4976 Timepicker CSS issues in Original theme
  - sf#4975 Move/Copy/Rename operations on Table/Db fail on Drizzle server
  - sf#4826 Two inline edit windows
  - sf#4979 Problem when import *.ods file
  - Add missing head tag
  - sf#4985 Column headers move when scrolling
- use smaller xz compressed archive
- update Apache configuration to be compatible with 2.4</changelog>
<changelog author="mcihar@suse.cz" date="1437480000">- Apache configuration compatible with both 2.2 and 2.4</changelog>
<changelog author="ecsos@opensuse.org" date="1439035200">- update to 4.4.13 (2015-08-07)
  - gh#1808 "Improve table structure" generates invalid SQL
  - fix issue Once checked "Show only active" checkbox is always
    checked
  - gh#1813 Delete rows using "Check All" is broken
  - fix issue Fix PHP 7 possible binding ambiguity
  - gh#11326 Exported schema includes all the tables of the
    database
  - gh#11339 Results not displayed if query ends in delimiter and
    comment
  - gh#11320 Live edit of data fields is not working always
  - fix issue Table list in navigation collapses when entering into
    a table in another page
  - gh#11364 JS error while trying to auto navigate to db structure
    page when db creation has failed</changelog>
<changelog author="ecsos@opensuse.org" date="1439121600">- update to 4.4.13.1 (2015-08-08)
  - gh#11368 SQL error when importing phpMyAdmin dump file</changelog>
<changelog author="ecsos@opensuse.org" date="1440504000">- update to 4.4.14 (2015-08-20)
  - gh#11367 Export after search, missing WHERE clause
  - gh#11380 Incomplete message after import
  - fix issue Incorrect scalar type declaration
    (reported under PHP 7)
  - gh#11389 ReCaptcha produces deprecated messages under PHP 7
  - gh#11387 phpseclib &lt; 2.0 produces deprecated messages on PHP 7
  - gh#11404 "Switch to copied table" doesn't work
  - gh#11406 Missing quotes after calling "distinct values"
  - gh#11386 Cannot import database with long data in one column
  - gh#11410 SPATIAL index option is not clickable</changelog>
<changelog author="ecsos@opensuse.org" date="1441972800">- update 4.4.14.1 (2015-09-08)
- Security fixes: [boo#945420]
  * PMASA-2015-4 (CVE-2015-6830, CWE-661 CWE-307)
    https://www.phpmyadmin.net/security/PMASA-2015-4/
  - fix issue [security] reCaptcha bypass</changelog>
<changelog author="ecsos@opensuse.org" date="1442491200">- boo#945999 enable required apache modules in spec at install</changelog>
<changelog author="ecsos@opensuse.org" date="1442750400">- update to 4.4.15 (2015-09-20)
  - gh#11411 Undefined "replace" function on numeric scalar
  - gh#11421 Stored-proc / routine - broken parameter parsing
  - fix issue  Missing name for configuration read_as_multibytes
  - gh#11431 Incorrect "No row selected" message
  - gh#11447 MySQL 5.5 and the language system variable
  - gh#11452 Semantics of export and import icons are mixed up
  - gh#11451 Designer-Bug in move.js on multiple server
    configuration
  - gh#11458 Invalid UTF-8 sequence in argument
  - gh#11457 Request URI too large
  - fix issue Invalid argument supplied for foreach()
  - gh#11461 Foreign key constraints for InnoDB tables with
    upper-case letters disabled
  - gh#11487 Warning when entering Query page
- change entrys in changelog from sf to gh from 4.13.0 to now</changelog>
<changelog author="ecsos@opensuse.org" date="1445860800">- update to 4.4.15.1 (2015-10-23)
  - gh#11464 phpMyAdmin suggests upgrading to newer version not
    usable on that system
- Security fixes: [boo#951960]
  * PMASA-2015-5 (CVE-2015-7873, CWE-661 CWE-20)
    https://www.phpmyadmin.net/security/PMASA-2015-5/
  - fix issue [security] Content spoofing on url.php</changelog>

</package>
<package pkgid="0affdcef31b732c9a3932bdbb956fed264398935149c87a798a70d01c65aac46" name="phpMyAdmin" arch="src">
    <version epoch="0" ver="4.4.15.1" rel="3.1"/>

<changelog author="ecsos@opensuse.org" date="1430049600">- update to 4.4.4 (2015-04-26)
  - sf#4863 Edit vs Change
  - sf#4859 Don't scroll (to bottom) when editing multiple rows
  - sf#4862 Misaligned Inline edit field
  - sf#4861 Use of undefined constant PMA_DRIZZLE
  - sf#4865 sprintf(): Too few arguments
  - sf#4866 Limit column ordering in index edit dialog
  - sf#4867 Incorrect ALTER TABLE statement generated
  - sf#4870 Inconsistency in 'Ignore' checkbox in insert page
  - sf#4869 Drop column action not asking to confirm
  - sf#4871 Error on creating table
  - fix bug Undefined index: Rows</changelog>
<changelog author="ecsos@opensuse.org" date="1430827200">- update to 4.4.5 (2015-05-05)
  - fix bug Table overhead stats: missing space before the unit
  - fix bug Fix resize icon in Designer
  - sf#4879 Exit fullscreen in Designer does not change
    the button text
  - sf#4880 Designer icons missing when using original theme
  - sf#4878 Column list of central columns is not cleared
  - sf#4881 jQuery dialogs of the Designer are not displayed in
    fullscreen
  - sf#4883 Search function breaks when searching for certain
    combinations of backslashes and slashes
  - sf#4830 Maximum execution time exceeded in Util.class.php
    (better fix)
  - sf#4885 Some icons are above the overlay of jQuery dialogs
  - sf#4886 Clicking on external links in advisor rules give
    JS error
  - sf#4888 Filter in central columns does not work in other
    languages</changelog>
<changelog author="ecsos@opensuse.org" date="1431000000">- update to 4.4.6 (2015-05-07)
  - sf#4890 webkitStorageInfo and webkitIndexedDB is deprecated
  - sf#4892 Undefined variable: unique_conditions
  - sf#4891 CSV Import ignores "Replace table data with file"
    checkbox</changelog>
<changelog author="ecsos@opensuse.org" date="1431518400">- update 4.4.6.1 (2015-05-13)
  This update fixes several vulnerabilities
- Security fixes:
  * PMASA-2015-2 (CVE-2015-3902, CWE-661 CWE-352)
    http://www.phpmyadmin.net/home_page/security/PMASA-2015-2.php
  - sf#4899 [security] CSRF vulnerability in setup
  * PMASA-2015-3 ( CVE-2015-3903, CWE-661 CWE-295)
    http://www.phpmyadmin.net/home_page/security/PMASA-2015-3.php
  - sf#4900 [security] Vulnerability allowing man-in-the-middle
    attack</changelog>
<changelog author="ecsos@opensuse.org" date="1431777600">- update to 4.4.7 (2015-05-16)
  - sf#4876 Settings issues (Favorite tables shown twice in
    Settings)
  - sf#4896 Non-styled error page when following results link
  - sf#4894 Deleting without confirmation
  - sf#4858 Issues with SQL autocomplete
  - sf#4897 Column hint in SQL autocomplete is sometimes not shown
  - sf#4898 JS error after selecting a field and press Enter
  - fix bug Honor proxy settings when getting Git commit
    information
  - fix bug Missing title on link
  - sf#4512 ForceSSL Redirect Check
  - fix bug Undefined index collation_connection
  - fix bug Error when the reporting server is down
  - fix bug Escape database and table names for partition
    maintenance
  - fix bug Invalid value for CURLOPT_SSL_VERIFYPEER
  - sf#4367 Import status infinite loop
  - sf#4902 Designer: Loading does not work
  - sf#4904 Setup: Overview &gt; Display does not work
  - sf#4906 Designer: pages from all databases</changelog>
<changelog author="ecsos@opensuse.org" date="1432814400">- update to 4.4.8 (2015-05-28)
  - fix bug Allow accessing visual query builder when pmadb is not
    configured
  - sf#4893 Nav tree line alignment issue
  - sf#4911 Lock page icon is not shown after fresh reload
  - sf#4912 "Highlight pointer" and "Row marker" doesn't work
    properly
  - fix bug Browse foreigners window goes out of the window
  - sf#4918 Date field popup dialog position bug
  - fix bug In /setup, PMA_messages is not defined
  - sf#4924 Recaptcha failure
  - sf#4930 Database copy doesn't work for tables with more than
    one FULLTEXT index
  - sf#4929 Edit view structure doesn't load the algorithm
  - sf#4923 Do not limit table comments to 60 characters</changelog>
<changelog author="ecsos@opensuse.org" date="1433505600">- update to 4.4.9 (2015-06-04)
  - sf#4920 relation view doesn't list fields of table in other
    database
  - sf#4905 Sorting by an alias
  - sf#4931 False error before entering reCAPTCHA
  - sf#4909 central column with multiple server
  - sf#4937 Custom export with backquotes off is not working
  - sf#4908 Reverse proxy: infinite internal redirect
    (added warning in doc)
  - sf#4942 Export to gzip saves plain text under Chrome</changelog>
<changelog author="ecsos@opensuse.org" date="1434542400">- update to 4.4.10 (2015-06-17)
  - sf#4950 Issues in database selection for replication
  - sf#4951 Trying to save chart as image crashes the browser
  - sf#4953 cant drag sql.gz file onto import input
  - sf#4960 Table creation results in GET request with missing
    server parameter that invalidates the session
  - sf#4961 Javascript error when Designer is opened
  - sf#4962 Insert by foreign key scrolls page to top
  - sf#4955 Clicking on the navi logo does not always work
  - fix bug External URL for $cfg['NavigationLogoLink'] causes
    JavaScript error when clicked</changelog>
<changelog author="ecsos@opensuse.org" date="1434542401">- add missing sql-scripts to doc</changelog>
<changelog author="mcihar@suse.cz" date="1435838400">- switch upstream url to https
- include signed release together with keyring to verify signatures</changelog>
<changelog author="ecsos@opensuse.org" date="1436356800">- update to 4.4.11 (2015-07-06)
  - fix bug Missing selected/entered values when editing active
  options in visual query builder
  - sf#4969 Autoload from prefs_storage not behaving properly
  - sf#4972 Incorrect length computed for binary data
  - fix bug Remove character set from create_tables_drizzle.sql
  - sf#4973 Users overview needs clarification
  - sf#4974 Creating a database from console doesn't update
    navigation panel
  - sf#4844 FAQ 1.17 needs an update
- change sourcepath in spec</changelog>
<changelog author="mcihar@suse.cz" date="1437393600">- update to 4.4.12 (2015-07-20)
  - Saved chart image does not have a proper name or an extension
  - sf#4976 Timepicker CSS issues in Original theme
  - sf#4975 Move/Copy/Rename operations on Table/Db fail on Drizzle server
  - sf#4826 Two inline edit windows
  - sf#4979 Problem when import *.ods file
  - Add missing head tag
  - sf#4985 Column headers move when scrolling
- use smaller xz compressed archive
- update Apache configuration to be compatible with 2.4</changelog>
<changelog author="mcihar@suse.cz" date="1437480000">- Apache configuration compatible with both 2.2 and 2.4</changelog>
<changelog author="ecsos@opensuse.org" date="1439035200">- update to 4.4.13 (2015-08-07)
  - gh#1808 "Improve table structure" generates invalid SQL
  - fix issue Once checked "Show only active" checkbox is always
    checked
  - gh#1813 Delete rows using "Check All" is broken
  - fix issue Fix PHP 7 possible binding ambiguity
  - gh#11326 Exported schema includes all the tables of the
    database
  - gh#11339 Results not displayed if query ends in delimiter and
    comment
  - gh#11320 Live edit of data fields is not working always
  - fix issue Table list in navigation collapses when entering into
    a table in another page
  - gh#11364 JS error while trying to auto navigate to db structure
    page when db creation has failed</changelog>
<changelog author="ecsos@opensuse.org" date="1439121600">- update to 4.4.13.1 (2015-08-08)
  - gh#11368 SQL error when importing phpMyAdmin dump file</changelog>
<changelog author="ecsos@opensuse.org" date="1440504000">- update to 4.4.14 (2015-08-20)
  - gh#11367 Export after search, missing WHERE clause
  - gh#11380 Incomplete message after import
  - fix issue Incorrect scalar type declaration
    (reported under PHP 7)
  - gh#11389 ReCaptcha produces deprecated messages under PHP 7
  - gh#11387 phpseclib &lt; 2.0 produces deprecated messages on PHP 7
  - gh#11404 "Switch to copied table" doesn't work
  - gh#11406 Missing quotes after calling "distinct values"
  - gh#11386 Cannot import database with long data in one column
  - gh#11410 SPATIAL index option is not clickable</changelog>
<changelog author="ecsos@opensuse.org" date="1441972800">- update 4.4.14.1 (2015-09-08)
- Security fixes: [boo#945420]
  * PMASA-2015-4 (CVE-2015-6830, CWE-661 CWE-307)
    https://www.phpmyadmin.net/security/PMASA-2015-4/
  - fix issue [security] reCaptcha bypass</changelog>
<changelog author="ecsos@opensuse.org" date="1442491200">- boo#945999 enable required apache modules in spec at install</changelog>
<changelog author="ecsos@opensuse.org" date="1442750400">- update to 4.4.15 (2015-09-20)
  - gh#11411 Undefined "replace" function on numeric scalar
  - gh#11421 Stored-proc / routine - broken parameter parsing
  - fix issue  Missing name for configuration read_as_multibytes
  - gh#11431 Incorrect "No row selected" message
  - gh#11447 MySQL 5.5 and the language system variable
  - gh#11452 Semantics of export and import icons are mixed up
  - gh#11451 Designer-Bug in move.js on multiple server
    configuration
  - gh#11458 Invalid UTF-8 sequence in argument
  - gh#11457 Request URI too large
  - fix issue Invalid argument supplied for foreach()
  - gh#11461 Foreign key constraints for InnoDB tables with
    upper-case letters disabled
  - gh#11487 Warning when entering Query page
- change entrys in changelog from sf to gh from 4.13.0 to now</changelog>
<changelog author="ecsos@opensuse.org" date="1445860800">- update to 4.4.15.1 (2015-10-23)
  - gh#11464 phpMyAdmin suggests upgrading to newer version not
    usable on that system
- Security fixes: [boo#951960]
  * PMASA-2015-5 (CVE-2015-7873, CWE-661 CWE-20)
    https://www.phpmyadmin.net/security/PMASA-2015-5/
  - fix issue [security] Content spoofing on url.php</changelog>

</package>
<package pkgid="31337769d9a95a6fba639c280bc8ccd65bd99f696fe9a6115cc2d9d72ad5fe96" name="polkit" arch="src">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="e0eb5aa8e53bf3aef759812c5b177929528033da00409c8db1bf14043393ea9f" name="polkit" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="99b1cd0d4575c783d0ec1bf6b8d51875b8989627712f366d21ac78c842542375" name="polkit-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="376c859801e770506a3641787e620744fd9a980fef9aed495da899d7a911ebf6" name="polkit-debugsource" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="2b8583f88b2b6697675cc3fcce80145a8fc7c5daffb44182e73ff746b394bb8f" name="polkit-devel" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="53d3ae560ebe3bf970d188444dfa3bc138e235838d56d63c59c2a989a2be2379" name="polkit-devel-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="f1d430308de87e199b328853dbbe49bf675d3413aa522623f26345671b1b959a" name="polkit-doc" arch="noarch">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="b38814467e9fcddb627155edd6877f551274abb554635a1524cc559325f37c8c" name="potrace" arch="src">
    <version epoch="0" ver="1.13" rel="5.1"/>

<changelog author="sbrabec@suse.cz" date="1060776000">- Initial version 1.0.</changelog>
<changelog author="sbrabec@suse.cz" date="1074168000">- Updated to version 1.3.</changelog>
<changelog author="sbrabec@suse.cz" date="1075982400">- Added speed optimization patch from author.</changelog>
<changelog author="sbrabec@suse.cz" date="1078747200">- Updated to version 1.4.</changelog>
<changelog author="sbrabec@suse.cz" date="1093608000">- Updated to version 1.5 (with LZW support).</changelog>
<changelog author="sbrabec@suse.cz" date="1105012800">- Provide bitmap_tracing virtual.</changelog>
<changelog author="sbrabec@suse.cz" date="1109592000">- Updated to version 1.6.</changelog>
<changelog author="nadvornik@suse.cz" date="1110369600">- Updated to version 1.7:
  * A bug in the progress bar code, which caused arithmetic
    exceptions on some 64-bit architectures, has been fixed.</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="pnemec@suse.cz" date="1153310400">- fixed wrong memory allocation in potracelib.c
  (added potrace-wrong_allocation.patch)</changelog>
<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>

</package>
<package pkgid="604508bb9be1887505edcca7358f3e3f754053f5fa61c1afd1418ca03827ce1c" name="potrace" arch="x86_64">
    <version epoch="0" ver="1.13" rel="5.1"/>

<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>

</package>
<package pkgid="1751b8c73cf9c42b29269a6a31b23181845d2268bef336d76ac6befcb65f14cb" name="potrace-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.13" rel="5.1"/>

<changelog author="sbrabec@suse.cz" date="1060776000">- Initial version 1.0.</changelog>
<changelog author="sbrabec@suse.cz" date="1074168000">- Updated to version 1.3.</changelog>
<changelog author="sbrabec@suse.cz" date="1075982400">- Added speed optimization patch from author.</changelog>
<changelog author="sbrabec@suse.cz" date="1078747200">- Updated to version 1.4.</changelog>
<changelog author="sbrabec@suse.cz" date="1093608000">- Updated to version 1.5 (with LZW support).</changelog>
<changelog author="sbrabec@suse.cz" date="1105012800">- Provide bitmap_tracing virtual.</changelog>
<changelog author="sbrabec@suse.cz" date="1109592000">- Updated to version 1.6.</changelog>
<changelog author="nadvornik@suse.cz" date="1110369600">- Updated to version 1.7:
  * A bug in the progress bar code, which caused arithmetic
    exceptions on some 64-bit architectures, has been fixed.</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="pnemec@suse.cz" date="1153310400">- fixed wrong memory allocation in potracelib.c
  (added potrace-wrong_allocation.patch)</changelog>
<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>

</package>
<package pkgid="d99c2b9ea81119e310bad40b3643ca9961361919f3c3cc06aa2f034a4348a8e4" name="potrace-debugsource" arch="x86_64">
    <version epoch="0" ver="1.13" rel="5.1"/>

<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>

</package>
<package pkgid="2e28fc959393e3dd3af50dcea8b0248b886a5ad4921a1e2d89eb18f1a4c53a31" name="potrace-devel" arch="x86_64">
    <version epoch="0" ver="1.13" rel="5.1"/>

<changelog author="jw@suse.de" date="1163592000">- replaced wrong_allocation.patch by official
  io.patch -- more bugs fixed.</changelog>
<changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 1.8:
  * minor bugfixes and portability improvements
  * rotation is now implemented in the PDF backend</changelog>
<changelog author="mrdocs@opensuse.org" date="1294833600">-Update to 1.9
  +the XFig and EPS backends were improved, and a fixed pagesize PDF backend was added;
  + support for BMP version 4 and version 5 files, as well as top-down BMP files, was added;
  + you'll see minor speed improvements to Potrace and major speed improvements to mkbitmap;
  + a Gaussian blur option was added to mkbitmap;
  + a change in the build sustem: libtool is now used to build and optionally install the Potrace library;
  + an optional simplified progress bar was added for dumb terminals;
  + this release also contains some portability improvements, cross-compilation improvements, and minor bug fixes.
- run spec cleaner on the spec file and remove redundant changes from spec
- drop xfig-patch as it is upstream now</changelog>
<changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
<changelog author="mrdocs@opensuse.org" date="1313841600">- update to 1.10
  + added --tight option
  + backends: simplified dimension calculations
  + eps backend: prevent integer overflow in bounding box.
  + disallow resolution of 0 dpi.
  + man page: added BACKEND TYPES section
  + fixed default scaling at 72dpi for 	variable-sized backends
  + new gimppath backend produces SVG output
  + suitable for current versions of Gimp.
  + added a --flat option for the SVG backend.
  + test suite: renamed *.out files to prevent make's
  + built-in implicit rules from accidentally overwriting them.
  + added DXF backend. Thanks to Jonas Benedett Dorr for testing.
  + use high resolution bounding box in EPS, PDF, and SVG backends
  + autoconf: CADD can now be given at compile time</changelog>
<changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="sbrabec@suse.cz" date="1361361600">- Update to version 1.11:
  * A GeoJSON backend was added.
  * Support for bitfields in the BMP format was added.
  * A minor change was made to the behavior of the alphamax
    parameter; a value of 0 now gives a true polygon.
- Build shared libpotrace.</changelog>
<changelog author="sbrabec@suse.cz" date="1427976000">- Update to version 1.12:
  * fix memory overflow bug triggered by very large bitmaps
    (bsc#924904, CVE-2013-7437)
  * minor fixes</changelog>
<changelog author="sbrabec@suse.com" date="1445601600">- Update to version 1.13:
  * Some critical bugs in the processing of BMP files were fixed
    (bsc#951760).
  * Portability was improved for C99 and for MSVC++.</changelog>

</package>
<package pkgid="a07d00a2685324b2133b64b0ca4598aa40541ad33daeb9ea94a487dfc152852c" name="pullin-bcm43xx-firmware" arch="noarch">
    <version epoch="0" ver="1.0" rel="4.1"/>

<changelog author="bwiedemann@suse.com" date="1417348800">- initial version to pull in broadcom firmware (bnc#904025)</changelog>

</package>
<package pkgid="9a27da4375264216df3c666ee82e33aff58266f841d6fd0c3311d0ed738001d1" name="pullin-bcm43xx-firmware" arch="src">
    <version epoch="0" ver="1.0" rel="4.1"/>

<changelog author="bwiedemann@suse.com" date="1417348800">- initial version to pull in broadcom firmware (bnc#904025)</changelog>

</package>
<package pkgid="2922412e7ca6de963c86795cb491b983e66eaa8c480e5204f41a3629aeb7e5ee" name="pullin-fluendo-mp3" arch="noarch">
    <version epoch="0" ver="13.2" rel="4.1"/>

<changelog author="coolo@suse.de" date="1225108800">- initial package</changelog>
<changelog author="coolo@novell.com" date="1277121600">- bump to 11.3</changelog>
<changelog author="vuntz@opensuse.org" date="1277121601">- Fix a typo in README.</changelog>
<changelog author="vuntz@opensuse.org" date="1277812800">- gst-fluendo-mp3 was renamed to gstreamer-0_10-fluendo-mp3 to
  follow package conventions for gstreamer packages, so update
  Recommends here.</changelog>
<changelog author="coolo@suse.com" date="1316520000">- bump version to 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1414670400">- Bump version to 13.2.
- Also recommend gstreamer-fluendo-mp3: MP3 support on GStramer 1.0
  based players is also wanted.</changelog>

</package>
<package pkgid="e6bbfb88070cbcd04d69fe4a6f002eb0e2a63266f8cbb0ac7235ed6d30951c3c" name="pullin-fluendo-mp3" arch="src">
    <version epoch="0" ver="13.2" rel="4.1"/>

<changelog author="coolo@suse.de" date="1225108800">- initial package</changelog>
<changelog author="coolo@novell.com" date="1277121600">- bump to 11.3</changelog>
<changelog author="vuntz@opensuse.org" date="1277121601">- Fix a typo in README.</changelog>
<changelog author="vuntz@opensuse.org" date="1277812800">- gst-fluendo-mp3 was renamed to gstreamer-0_10-fluendo-mp3 to
  follow package conventions for gstreamer packages, so update
  Recommends here.</changelog>
<changelog author="coolo@suse.com" date="1316520000">- bump version to 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1414670400">- Bump version to 13.2.
- Also recommend gstreamer-fluendo-mp3: MP3 support on GStramer 1.0
  based players is also wanted.</changelog>

</package>
<package pkgid="4f7b196d3f63c63dd136d1a219f4a8a103dbd8ebd50bb621a1152ab77dd619a5" name="python-avahi" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
<changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
<changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
<changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
<changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
<changelog author="mgorse@suse.com" date="1444219200">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
<changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>

</package>
<package pkgid="cede7ca0f9241ac13fce91987f80cfaff90c785755c2da14fd90c4df84462c3d" name="python-avahi-gtk" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="3101660b2644fb23339c95d94121fd7dbc1926b0d85286594dc3e610c31ab75a" name="python-libmount" arch="src">
    <version epoch="0" ver="2.25" rel="9.5"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="3110dcceb04ea80363f9d6c83504e43aad50ca7405a4bb93f6f9faa873a47724" name="python-libmount" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.5"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="c176905fcb92b7272a6d11c28cb12924bffbeac9b228a689d3e2e4529dbf58b9" name="python-libmount-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.5"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="659d9bc7f86126e612b9142e9465c660a71350f6d53bc771cbf1d321fd6c4909" name="python-libmount-debugsource" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.5"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="2dec4216c48d762be221767e7392f4884db8557313aca78327f2ae402436a812" name="python-virtualbox" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="57f351380703f24ff17387f2b9ceb6d5c539b7a60c2f27007974b7ec97c6b549" name="python-virtualbox-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="efef438068828fb60ff90ccbc5911fdf66999c704e5d5a10cffcc47e5691d5d6" name="release-notes-openSUSE" arch="noarch">
    <version epoch="0" ver="42.1.20151109" rel="3.1"/>

<changelog author="ke@suse.de" date="1377172800">- 13.1.1:
  * In .ent.in, set suse-version to 13.1 (bnc#829300).
  * New entries: tomcat: Logging to the System Log (bnc#816211); xinetd:
  Logging to the System Log (bnc#816211).</changelog>
<changelog author="ke@suse.de" date="1378987200">- 13.1.2:
  * New entries: Darktable: Refreshing Cache Files Needed (bnc#839661).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1381147200">- 13.1.3:
  * New entries: Apache 2.4 (bnc#842381); Dropped YaST Modules
  (bnc#843201).
  * Updated entries: openSUSE documentation.</changelog>
<changelog author="ke@suse.de" date="1382011200">- Update translations.</changelog>
<changelog author="ke@suse.de" date="1386676800">- 13.2.0:
  * Start resetting for 13.2 and add CHECKIT markers.
- Do not try to build PDF on armv7l and aarch64; xmlgraphics-fop does
  not exist.</changelog>
<changelog author="rsalevsky@suse.com" date="1404993600">- 13.2.1:
  * use DAPS for building the RNs</changelog>
<changelog author="rsalevsky@suse.com" date="1406030400">- 13.2.20140722:
  * update make infrastucture
  * normalize release-notes.xml</changelog>
<changelog author="rsalevsky@suse.com" date="1406203200">- 13.2.20140724:
  * fix Desktop File DocPath
  * dynamic Date</changelog>
<changelog author="rsalevsky@suse.com" date="1407240000">- 13.2.20140805:
  * update translations
  * change date format</changelog>
<changelog author="ke@suse.de" date="1413201600">- 13.2.20141013:
  * Resolve some 13.1 check-it markers.</changelog>
<changelog author="ke@suse.de" date="1414670400">- 13.2.20141030:
- Update translations.
- Remove misleading skype statement (bnc#902977).
- New entries: Second Static Mouse Pointer (bnc#899610); Live CD
  Installer and Keyboard Settings (bnc#903242); YaST (Qt GUI): "Service
  Manager" Icon Appears Twice (bnc#903243).
  openSUSE pre-13.2 cifstab Migration (bnc#902947).
  Missing Dependencies for virt-manager (bnc#901869).
  Network After an Update With YaST (bnc#895447)</changelog>
<changelog author="ke@suse.de" date="1415016000">- 13.2.20141103:
- New entries: Modem Authorization After Suspend (bnc#900813).
  Warning: No Location for Bootloader Stage1 Selected (bnc#898023).
  Btrfs and Windows 7 (bnc#900954).
  Unbranded Grub2 on New Installs From Live (bnc#897847).
  Old KDE Wallpaper After Upgrade.
  MATE Desktop official integration,
  Unable to Search Packages in GTK YaST (bnc#901511).
  NET Installation Using Wifi (bnc#899895).
  Slow startup in GNOME (bnc#901013).
  FGLRX Driver for openSUSE 13.2.</changelog>
<changelog author="ke@suse.de" date="1420632000">- Expand entities (bnc#907112).</changelog>
<changelog author="ke@suse.de" date="1444305600">- 42.1.20151008:
- Start resetting for 42.1 (bsc#949491, partially done).</changelog>
<changelog author="ke@suse.de" date="1444651200">- 42.1.20151012 (bsc#949491):
- New entries: grep update (bsc#932494); Base System Installation
  (bsc#947712).</changelog>
<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>

</package>
<package pkgid="157453511cf455011cfc93efe05de0a8d413b2f5498ce0eb2dc9281a4ccfdf65" name="release-notes-openSUSE" arch="src">
    <version epoch="0" ver="42.1.20151109" rel="3.1"/>

<changelog author="ke@suse.de" date="1377172800">- 13.1.1:
  * In .ent.in, set suse-version to 13.1 (bnc#829300).
  * New entries: tomcat: Logging to the System Log (bnc#816211); xinetd:
  Logging to the System Log (bnc#816211).</changelog>
<changelog author="ke@suse.de" date="1378987200">- 13.1.2:
  * New entries: Darktable: Refreshing Cache Files Needed (bnc#839661).
  * Update translations.</changelog>
<changelog author="ke@suse.de" date="1381147200">- 13.1.3:
  * New entries: Apache 2.4 (bnc#842381); Dropped YaST Modules
  (bnc#843201).
  * Updated entries: openSUSE documentation.</changelog>
<changelog author="ke@suse.de" date="1382011200">- Update translations.</changelog>
<changelog author="ke@suse.de" date="1386676800">- 13.2.0:
  * Start resetting for 13.2 and add CHECKIT markers.
- Do not try to build PDF on armv7l and aarch64; xmlgraphics-fop does
  not exist.</changelog>
<changelog author="rsalevsky@suse.com" date="1404993600">- 13.2.1:
  * use DAPS for building the RNs</changelog>
<changelog author="rsalevsky@suse.com" date="1406030400">- 13.2.20140722:
  * update make infrastucture
  * normalize release-notes.xml</changelog>
<changelog author="rsalevsky@suse.com" date="1406203200">- 13.2.20140724:
  * fix Desktop File DocPath
  * dynamic Date</changelog>
<changelog author="rsalevsky@suse.com" date="1407240000">- 13.2.20140805:
  * update translations
  * change date format</changelog>
<changelog author="ke@suse.de" date="1413201600">- 13.2.20141013:
  * Resolve some 13.1 check-it markers.</changelog>
<changelog author="ke@suse.de" date="1414670400">- 13.2.20141030:
- Update translations.
- Remove misleading skype statement (bnc#902977).
- New entries: Second Static Mouse Pointer (bnc#899610); Live CD
  Installer and Keyboard Settings (bnc#903242); YaST (Qt GUI): "Service
  Manager" Icon Appears Twice (bnc#903243).
  openSUSE pre-13.2 cifstab Migration (bnc#902947).
  Missing Dependencies for virt-manager (bnc#901869).
  Network After an Update With YaST (bnc#895447)</changelog>
<changelog author="ke@suse.de" date="1415016000">- 13.2.20141103:
- New entries: Modem Authorization After Suspend (bnc#900813).
  Warning: No Location for Bootloader Stage1 Selected (bnc#898023).
  Btrfs and Windows 7 (bnc#900954).
  Unbranded Grub2 on New Installs From Live (bnc#897847).
  Old KDE Wallpaper After Upgrade.
  MATE Desktop official integration,
  Unable to Search Packages in GTK YaST (bnc#901511).
  NET Installation Using Wifi (bnc#899895).
  Slow startup in GNOME (bnc#901013).
  FGLRX Driver for openSUSE 13.2.</changelog>
<changelog author="ke@suse.de" date="1420632000">- Expand entities (bnc#907112).</changelog>
<changelog author="ke@suse.de" date="1444305600">- 42.1.20151008:
- Start resetting for 42.1 (bsc#949491, partially done).</changelog>
<changelog author="ke@suse.de" date="1444651200">- 42.1.20151012 (bsc#949491):
- New entries: grep update (bsc#932494); Base System Installation
  (bsc#947712).</changelog>
<changelog author="ke@suse.de" date="1445515200">- 42.1.20151022 (bsc#950877):
- New entries: openSUSE Leap as Guest in VirtualBox (bsc#950877).</changelog>
<changelog author="ke@suse.de" date="1445601600">- 42.1.20151023 (bsc#950877):
- Updating some texts and translations.</changelog>
<changelog author="ke@suse.de" date="1445947200">- 42.1.20151027:
- New entries: CUPS (bsc#951596); Warn about minimal install not having
  yast or susefirewall (bsc#951866).
- Removed entries: grep update (bsc#932494); openSUSE Leap as Guest in
  VirtualBox (bsc#952019).</changelog>
<changelog author="ke@suse.de" date="1446033600">- 42.1.20151028:
- Changed entries: Warn about minimal install not having
  yast or susefirewall (bsc#951866).</changelog>
<changelog author="sknorr@suse.com" date="1447070400">- 42.1.20151109
- Added entry: sddm hangs while causing autofs to mount hundreds of
  nfs homes
- Added entry: network interface naming scheme has changed, this
  may lock users out of remote computers</changelog>

</package>
<package pkgid="54aaff72f6e51d3d48ea143d486b2ec7d041ec22f33e99566f43217ae558f58d" name="roundcubemail" arch="noarch">
    <version epoch="0" ver="1.1.3" rel="3.1"/>

<changelog author="aj@ajaissle.de" date="1392292800">- Renamed logrotate config to just 'roundcubemail'</changelog>
<changelog author="aj@ajaissle.de" date="1393243200">- Dropped SQL_dir.patch, it's way easier to maintain to just create
  a symlink.</changelog>
<changelog author="aj@ajaissle.de" date="1393502400">- Be more verbose if migration happened
- Deny web access to roundcubemail/{migration,migrated}</changelog>
<changelog author="aj@ajaissle.de" date="1393588800">- Require php-pear-Net_Sieve for managesieve plugin</changelog>
<changelog author="aj@ajaissle.de" date="1394193600">- Use macros for DES string replacement</changelog>
<changelog author="aj@ajaissle.de" date="1396958400">- Update to 1.0.0
  * Cleaned up the configuration into a single file
  * Importing email messages and contact group assignments
  * Advanced LDAP address book functionality
  * A toggle to switch between HTML and plaintext view
  * Save drafts in local storage for recovery
  * Canned responses to save and recall boilerplate texts
  * Improved keyboard navigation in messages list
  * Optimized UI to work on tablet devices
  * Attachment reminder plugin
  + many bug fixes</changelog>
<changelog author="aj@ajaissle.de" date="1397131200">- Remove possible 'leftover' SQL directory from document root,
  preventing upgrades from versions &gt; 0.9.5 [bnc#872790]</changelog>
<changelog author="aj@ajaissle.de" date="1399809600">- Update to 1.0.1
  * Support 'error' and 'body_file' return attribs in 'message_before_send' hook (#1489595)
  * Apply user-specific replacements to group's base_dn property (#1489779)
  * Fix missing email address when importing contacts from outlook csv (#1489830)
  * Fix bug where "With attachment" option in search filter wasn't selected after return from mail view (#1489774)
  * Fix "washing" of unicoded style attributes (#1489777)
  * Fix unintentional redirect from compose page in Webkit browsers (#1489789)
  * Fix messages index cache update under some conditions (e.g. proxy) (#1489756)
  * Fix lack of translation of special folders in some configurations (#1489799)
  * Fix XSS issue in plain text spellchecker (#1489806)
  * Fix invalid page title for some folders (1489804)
  * Fix redundant alert message on over-size uploads (#1489817)
  * Fix next message display after removing a message (#1489800)
  * Fix missing Mail-Followup-To header in sent mail (#1489829)
  * Fix error when spell-checking an empty text (#1489831)
  * Avoid popupmenus being closed when scrollbar is clicked (#1489832)
  * Add proxy_whitelist configuration option (#1489729)
  * Fix identities_level=4 handling in new_user_dialog plugin (#1489840)
  * Fix various db_prefix issues (#1489839)
  * Fix too small length of users.preferences column data type on MySQL
  * Fix redundant warning when switching from html to text in empty editor (#1489819)
  * Fix invalid host validation on login (#1489841)
  * Fix IMAP connection test in installer so it is aware of imap_auth_type (#1489746)</changelog>
<changelog author="jamesp@vicidial.com" date="1403524800">- Modify roundcubemail-httpd.conf for OpenSuSE v.13.1 apache2
    o Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the file had to be modified to look for this static
    module and load pre-2.4 directives if found on Apache 2.4. It
    should be forward compatible if the mod_access_compat.c module
    become dynamic in the future and is not loaded.</changelog>
<changelog author="aj@ajaissle.de" date="1405857600">- Update to 1.0.2
  * Fix storing unsaved drafts in localStorage (#1489818)
  * Fix redundant horizontal scrollbar in HTML editor (#1489950)
  * Fix PHP error in Preferences when default_folders was in dont_override (#1489940)
  * Add configurable LDAP_OPT_DEREF option (#1489864)
  * Fix unintentional draft autosave request if autosave is disabled (#1489882)
  * Fix malformed References: header in send/saved mail (#1489891)
  * Fix handling unicode characters in links (#1489898)
  * Fix incorrect handling of HTML comments in messages sanitization code (#1489904)
  * Fix so current page is reset on list-mode change (#1489907)
  * Fix so responses menu hides on click in classic skin (#1489915)
  * Fix unintentional line-height style modification in HTML messages (#1489917)
  * Fix broken normalize_string(), add support for ISO-8859-2 (#1489918)
  * Support csv contacts import in German localization (#1489920)
  * Fix so message list and counters are updated when a message is opened in new window (#1489919)
  * Fix malformed recipient name when composing a message by clicking on mailto link (#1489942)
  * Fix list reload after sending message in another window (#1489931)
  * Fix so address format errors are ignored when saving a draft (#1489954)
  * Fix incorrect label translation in return receipt (#1489963)
  * Fix security issue in delete-response action - allow only ajax request
  * Fix Delete button state after deleting identity/response (#1489972)
  * Fix bug where contacts with no email address were listed on compose addressbook (#1489970)
  * Fix images import from various vCard formats (#1489977)
  * Fix sorting messages by size on servers without SORT capability (#1489981)</changelog>
<changelog author="aj@ajaissle.de" date="1411992000">- Update to 1.0.3
    Fix insert-signature command in external compose window if opened from inline compose screen (#1490074)
    Initialize HTML editor before restoring a message from localStorage (#1490016)
    Add 'sig_max_lines' config option to default config file (#1490071)
    Add option to specify IMAP connection socket parameters - imap_conn_options (#1489948)
    Add option to set default message list mode - default_list_mode (#1487312)
    Enable contextmenu plugin for TinyMCE editor (#1487014)
    Fix some mime-type to extension mapping checks in Installer (#1489983)
    Fix errors when using localStorage in Safari's private browsing mode (#1489996)
    Fix bug where $Forwarded flag was being set even if server didn't support it (#1490000)
    Fix various iCloud vCard issues, added fallback for external photos (#1489993)
    Fix invalid Content-Type header when send_format_flowed=false (#1489992)
    Fix errors when adding/updating contacts in active search (#1490015)
    Fix incorrect thumbnail rotation with GD and exif orientation data (#1490029)
    Fix contacts list update after adding/deleting/moving a contact (#1490028, #1490033)
    Fix handling of email addresses with quoted domain part (#1490040)
    Fix comm_path update on task switch (#1490041)
    Fix error in MSSQL update script 2013061000.sql (#1490061)
    Fix validation of email addresses with IDNA domains (#1490067)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post scripts</changelog>
<changelog author="aj@ajaissle.de" date="1418904000">- Update to 1.0.4
    Disable TinyMCE contextmenu plugin as there are more cons than pros in using it (#1490118)
    Fix bug where show_real_foldernames setting wasn't honored on compose page (#1490153)
    Fix issue where Archive folder wasn't protected in Folder Manager (#1490154)
    Fix compatibility with PHP 5.2. in rcube_imap_generic (#1490115)
    Fix setting flags on servers with no PERMANENTFLAGS response (#1490087)
    Fix regression in SHAA password generation in ldap driver of password plugin (#1490094)
    Fix displaying of HTML messages with absolutely positioned elements in Larry skin (#1490103)
    Fix font style display issue in HTML messages with styled &lt;span&gt; elements (#1490101)
    Fix download of attachments that are part of TNEF message (#1490091)
    Fix handling of uuencoded messages if messages_cache is enabled (#1490108)
    Fix handling of base64-encoded attachments with extra spaces (#1490111)
    Fix handling of UNKNOWN-CTE response, try do decode content client-side (#1490046)
    Fix bug where creating subfolders in shared folders wasn't possible without ACL extension (#1490113)
    Fix reply scrolling issue with text mode and start message below the quote (#1490114)
    Fix possible issues in skin/skin_path config handling (#1490125)
    Fix lack of delimiter for recipient addresses in smtp_log (#1490150)
    Fix generation of Blowfish-based password hashes (#1490184)
    Fix bugs where CSRF attacks were still possible on some requests</changelog>
<changelog author="aj@ajaissle.de" date="1422792000">- Update to 1.0.5
    Fix bug where some valid text in a message was handled as uuencoded attachment
    Fix wrong icon for download button in classic skin
    Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208)
    Fix checks based on window.ActiveXObject in IE &gt; 10
    Fix XSS issue in style attribute handling (#1490227)
    Fix bug where Drafts list wasn't updated on draft-save action in new window (#1490225)
    Fix so "set as default" option is hidden if identities_level &gt; 1 (#1490226)
    Fix bug where search was reset after returning from compose visited for reply
    Fix javascript error in "IE 8.0/Tablet PC" browser (#1490210)
    Fix bug where empty fieldmap config entries caused empty results of ldap search (#1490229)
- Update to 1.1-rc (1.0.95)</changelog>
<changelog author="aj@ajaissle.de" date="1422792001">- Update to 1.1-rc (1.0.95)
    Update jQuery to version 2.1.3
    Improve system security by using optional special URL with security token - use_secure_urls
    Allow to define separate server/path for image/js/css files - assets_url/assets_dir
    Sync vendor folder if exists in source package (#1490145)
    Avoid useless reloading list when resetting search with active filter (#1490057)
    Fix invalid folder selection if clicked while busy (#1490158)
    Fix import of multiple contact email addresses from Outlook-csv format (#1490169)
    Fix drag-n-drop to folders expanded while dragging (#1490157)
    Fix import of multiple contact groups from Google-csv format (#1490159)
    Fix import of contacts with multiple email addresses from Google-csv format (#1490178)
    Fix bugs where CSRF attacks were still possible on some requests
    Fix some rcube_utils::anytodatetime() corner cases with timezone mismatches (#1490163)
    Improve move-to and contact-export button in classic skin (#1490166)
    Fix wrong icon for download button in classic skin
    Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208)
- Update to 1.1-beta (1.0.90)
    Fix skin path handling in plugin context (#1488967)
    Prevent memory exhaustion on image resizing with GD on Windows (#1489937)
    Add plugin hook for database table name lookups as requested in #1489837
    Added Oracle database support
    Support contacts import in GMail CSV format
    Added namespace filter in Folder Manager
    Added folder searching in Folder Manager
    Fix restoring draft messages from localStorage if editor mode differs (#1490016)
    Added config option/user preference to disable saving messages in localStorage (#1489979)
    Added config option 'imap_log_session' to enable Roundcube &lt;-&gt; IMAP session ID logging
    Added config option 'log_session_id' to control the length of the session identifier in logs
    Implemented 'storage_connected' API hook after successful IMAP login (#1490025)
    Integrate Net_LDAP3 and rcube_ldap_generic classes
    Add option (disabled_actions) to disable UI elements/actions (#1489638)
    Support password encryption using openssl extension (#1489989)
    Create/rename groups in UI dialogs (#1489951)
    Added 'contact_search_name' option to define autocompletion entry format
    Display quota information for current folder not INBOX only (#1487993)
    Support images in HTML signatures (#1488676)
    Display full quota information in popup (#1485769, #1486604)
    Mail compose: Selecting contact inserts recipient to previously focused input - to/cc/bcc accordingly (#1489684)
    Close "no subject" prompt with Enter key (#1489580)
    Password: Add option to force new users to change their password (#1486884)
    Improve support for screen readers and assistive technology using WCAG 2.0 and WAI ARIA standards
    Enable basic keyboard navigation throughout the UI (#1487845)
    Select/scroll to previously selected message when returning from message page (#1489023)
    Display a warning if popup window was blocked (#1489618)
    Remove (was: ...) from message subject on reply (#1489375)
    Update to TinyMCE 4.1 (#1489057)
    Enable autolink plugin in TinyMCE (#1488845)
    Support image operations with Imagick extension (#1489734)
    Support upload progress with session.upload_progress and PECL uploadprogress module (#1488702)
    Make identity name field optional (#1489510)
    Utility script to remove user records from the local database
    Plugin API: Added message_saved hook (#1489752)
    Plugin API: Added imap_search_before hook
    Support messages import from zip archives
    Zipdownload: Added mbox format support (#1486069)
    Drop support for IE6, move IE7/IE8 support to legacy_browser plugin
    Update to jQuery-2.1.1
    Search across multiple folders (#1485234)
    Improve UI integration of ACL settings
    Drop support for PHP &lt; 5.3.7
    Set In-Reply-To and References for forwarded messages (#1489593)
    Removed redundant default_folders config option (#1489737)
    Implemented IMAP SPECIAL-USE extension support [RFC6154] (#1487830)
    Optimize some framed pages content for better performance (#1489792)
    Improve text messages display and conversion to HTML (#1488937)
    Don't remove links when html signature is converted to text (#1489621)
    Fix page title when using search filter (#1490023)
    Fix mbox files import
    Fix some character sets detection (#1490135)
    Fix so attachment charset is set in headers of forward/draft message (#1490109)
    Fix bug where wrong charset could be used for text attachment preview page (#1490106)
    Fix setting flags on servers with no PERMANENTFLAGS response (#1490087)
    Fix regression in SHAA password generation in ldap driver of password plugin (#1490094)
    Fix displaying of HTML messages with absolutely positioned elements in Larry skin (#1490103)
    Fix font style display issue in HTML messages with styled &lt;span&gt; elements (#1490101)
    Fix download of attachments that are part of TNEF message (#1490091)
    Fix handling of uuencoded messages if messages_cache is enabled (#1490108)
    Fix handling of base64-encoded attachments with extra spaces (#1490111)
    Fix handling of UNKNOWN-CTE response, try do decode content client-side (#1490046)
    Fix bug where creating subfolders in shared folders wasn't possible without ACL extension (#1490113)
    Fix reply scrolling issue with text mode and start message below the quote (#1490114)
    Fix possible issues in skin/skin_path config handling (#1490125)
- Rebased roundcubemail-0.9.1_config-dir.patch as roundcubemail-1.1-beta-config_dir.patch</changelog>
<changelog author="aj@ajaissle.de" date="1423569600">- Update to 1.1.0
  New features:
  - Allow searching across multiple folders
  - Improved support for screen readers and assistive technology using
    WCAG 2.0 andWAI ARIA standards
  - Update to TinyMCE 4.1 to support images in HTML signatures (copy &amp; paste)
  - Added namespace filter and folder searching in folder manager
  - New config option to disable UI elements/actions
  - Stronger password encryption using OpenSSL
  - Support for the IMAP SPECIAL-USE extension
  - Support for Oracle as database backend
  - Manage 3rd party libs with Composer
  - Secure URLs [1] (disabled by default)
  Changelog:
    Make SMTP error log more verbose - include server response and error code
    Fix download options menu (added by zipdownload plugin) in classic skin (#1490228)
    Fix blocked.gif image usage with assets_dir set
    Fix bug where max_group_members was ignored when adding a new contact (#1490214)
    Hide MDN and DSN options in compose if disabled by admin (#1490221)
    Fix checks based on window.ActiveXObject in IE &gt; 10
    Fix XSS issue in style attribute handling (#1490227)
    Fix bug where Drafts list wasn't updated on draft-save action in new window (#1490225)
    Fix so "set as default" option is hidden if identities_level &gt; 1 (#1490226)
    Fix bug where search was reset after returning from compose visited for reply
    Fix javascript error in "IE 8.0/Tablet PC" browser (#1490210)
    Fix bug where Reply-To address was ignored on reply to messages sent by self (#1490233)
    Fix bug where empty fieldmap config entries caused empty results of ldap search (#1490229)
    Fix bug where drafts list wasn't refreshed after draft message was sent from another window (#1490238)
    Fix keyboard navigation and css in datepicker widget across many Firefox versions
    Fix false warning when opening attached text/plain files (#1490241)
    Fix bug where signature could have been inserted twice after plain-to-html switch (#1490239)
    Fix security issue in DBMail driver of password plugin (#1490261)
    Enable FollowSymLinks? option in .htaccess file which is required by rewrite rules (#1490255)
    Fix so JSON.parse() errors on localStorage items are ignored (#1490249)
  [1] http://trac.roundcube.net/wiki/Howto_Config/Secure_URLs</changelog>
<changelog author="aj@ajaissle.de" date="1427371200">- Update to 1.1.1
    ACL: Allow other plugins to adjust the list of permissions and groups to edit
    Add possibility to print contact information (of a single contact)
    Add possibility to configure max_allowed_packet value for all database engines (#1490283)
    Improved handling of storage errors after message is sent
    Update to TinyMCE 4.1.9
    Unified request* event arguments handling, added support for _unlock and _action parameters
    Security: Generate random hash for the per-user local storage prefix (#1490279)
    Fix refreshing of drafts list when sending a message which was saved in meantime (#1490238)
    Fix saving/sending emoticon images when assets_dir is set
    Fix PHP fatal error when visiting Vacation interface and there's no sieve script yet (#1490292)
    Fix setting max packet size for DB caches and check packet size also in shared cache
    Fix needless security warning on BMP attachments display (#1490282)
    Fix handling of some improper constructs in format=flowed text as per the RFC3676[4.5] (#1490284)
    Fix performance of rcube_db_mysql::get_variable()
    Fix missing or not up-to-date CATEGORIES entry in vCard export (#1490277)
    Fix fatal errors on systems without mbstring extension or mb_regex_encoding() function (#1490280)
    Fix cursor position on reply below the quote in HTML mode (#1490263)
    Fix so "over quota" errors are displayed also in message compose page
    Fix duplicate entries supression in autocomplete result (#1490290)
    Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281)
    Fix parsing invalid HTML messages with BOM after &lt;!DOCTYPE&gt; (#1490291)
    Fix duplicate entry on timezones list in rcube_config::timezone_name_from_abbr() (#1490293)
    Fix so localized folder name is displayed in multi-folder search result (#1490243)
    Fix javascript error after creating a folder which is a subfolder of another one (#1490297)
    Fix bug where subject of sent/saved message was removed if mbstring wasn't installed (#1490295)
    Fix missing vcard_attachment icon on messages list (#1490303)
    Fix storing signatures with big images in MySQL database (#1490306)
    Fix Opera browser detection in javascript (#1490307)
    Fix so search filter, scope and fields are reset on folder change
    Fix rows count when messages search fails (#1490266)
    Fix bug where spellchecking in HTML editor do not work after switching editor type more than once (#1490311)
    Fix bug where TinyMCE area height was too small on slow network connection (#1490310)
    Fix backtick character handling in sql queries (#1490312)
    Fix redirect URL for attachments loaded in an iframe when behind a proxy (#1490191)
    Fix menu container references to point to the actual &lt;ul&gt; element (#1490313)
    Fix javascripts errors in IE8 - lack of Event.which, focusing a hidden element (#1490318)</changelog>
<changelog author="draht@schaltsekun.de" date="1433764800">- Update to 1.1.2
    Add new plugin hook 'identity_create_after' providing the ID of the inserted identity (#1490358)
    Add option to place signature at bottom of the quoted text even in top-posting mode [sig_below]
    Fix handling of %-encoded entities in mailto: URLs (#1490346)
    Fix zipped messages downloads after selecting all messages in a folder (#1490339)
    Fix vpopmaild driver of password plugin
    Fix PHP warning: Non-static method PEAR::setErrorHandling() should not be called statically (#1490343)
    Fix tables listing routine on mysql and postgres so it skips system or other database tables and views (#1490337)
    Fix message list header in classic skin on window resize in Internet Explorer (#1490213)
    Fix so text/calendar parts are listed as attachments even if not marked as such (#1490325)
    Fix lack of signature separator for plain text signatures in html mode (#1490352)
    Fix font artifact in Google Chrome on Windows (#1490353)
    Fix bug where forced extwin page reload could exit from the extwin mode (#1490350)
    Fix bug where some unrelated attachments in multipart/related message were not listed (#1490355)
    Fix mouseup event handling when dragging a list record (#1490359)
    Fix bug where preview_pane setting wasn't always saved into user preferences (#1490362)
    Fix bug where messages count was not updated after message move/delete with skip_deleted=false (#1490372)
    Fix security issue in contact photo handling (#1490379)
    Fix possible memcache/apc cache data consistency issues (#1490390)
    Fix bug where imap_conn_options were ignored in IMAP connection test (#1490392)
    Fix bug where some files could have "executable" extension when stored in temp folder (#1490377)
    Fix attached file path unsetting in database_attachments plugin (#1490393)
    Fix issues when using moduserprefs.sh without --user argument (#1490399)
    Fix potential info disclosure issue by protecting directory access (#1490378)
    Fix blank image in html_signature when saving identity changes (#1490412)
    Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key (#1490402)
    Fix XSS vulnerability in _mbox argument handling (#1490417)</changelog>
<changelog author="aj@ajaissle.de" date="1442318400">- Update to 1.1.3
    Fix closing of nested menus (#1490443)
    Fix so E_DEPRECATED errors from PEAR libs are ignored by error_reporting change (#1490281)
    Fix compatibility with PHP 5.3 in rcube_ldap class (#1490424)
    Get rid of Mail_mimeDecode package dependency (#1490416)
    Fix "Importing..." message does not hide on error (#1490422)
    Fix SQL error on logout when using session_storage=php (#1490421)
    Update to jQuery 2.1.4 (#1490406)
    Fix Compose action in addressbook for results from multiple addressbooks (#1490413)
    Fix bug where some messages in multi-folder search couldn't be viewed/printed/downloaded (#1490426)
    Fix unintentional messages list page change on page switch in compose addressbook (#1490427)
    Fix race-condition in saving user preferences and loading plugin config (#1490431)
    Fix so plain text signature field uses monospace font (#1490435)
    Fix so links with href == content aren't added to links list on html to text conversion (#1490434)
    Fix handling of non-break spaces in html to text conversion (#1490436)
    Fix self-reply detection issues (#1490439)
    Fix multi-folder search result sorting by arrival date (#1490450)
    Fix so *-request@ addresses in Sender: header are also ignored on reply-all (#1490452)
    Update to TinyMCE 4.1.10 (#1490405)
    Fix draft removal after a message is sent and storing sent message is disabled (#1490467)
    Fix so imap folder attribute comparisons are case-insensitive (#1490466)
    Fix bug where new messages weren't added to the list in search mode
    Fix wrong positioning of message list header on page scroll in Webkit browsers (#1490035)
    Fix some javascript errors in rare situations (#1490441)
    Fix error when using back button after sending an email (#1490009)
    Fix removing signature when switching to identity with an empty sig in HTML mode (#1490470)
    Disable links list generation on html-to-text conversion of identities or composed message (#1490437)
    Fix "washing" of style elements wrapped into many lines
    Fix so input field (e.g. search box) does not loose focus on list load (#1490455)
    Fix minor XSS issue in drag-n-drop file uploads (#1490530)</changelog>
<changelog author="aj@ajaissle.de" date="1445601600">- Changed roundcubemail-httpd.conf
- Enable mod_version.c per default [boo#938840]</changelog>

</package>
<package pkgid="8aa35e36483be590b9f0a332440e5d2c47d8adf4f29760fa2025597506d58e70" name="roundcubemail" arch="src">
    <version epoch="0" ver="1.1.3" rel="3.1"/>

<changelog author="aj@ajaissle.de" date="1392292800">- Renamed logrotate config to just 'roundcubemail'</changelog>
<changelog author="aj@ajaissle.de" date="1393243200">- Dropped SQL_dir.patch, it's way easier to maintain to just create
  a symlink.</changelog>
<changelog author="aj@ajaissle.de" date="1393502400">- Be more verbose if migration happened
- Deny web access to roundcubemail/{migration,migrated}</changelog>
<changelog author="aj@ajaissle.de" date="1393588800">- Require php-pear-Net_Sieve for managesieve plugin</changelog>
<changelog author="aj@ajaissle.de" date="1394193600">- Use macros for DES string replacement</changelog>
<changelog author="aj@ajaissle.de" date="1396958400">- Update to 1.0.0
  * Cleaned up the configuration into a single file
  * Importing email messages and contact group assignments
  * Advanced LDAP address book functionality
  * A toggle to switch between HTML and plaintext view
  * Save drafts in local storage for recovery
  * Canned responses to save and recall boilerplate texts
  * Improved keyboard navigation in messages list
  * Optimized UI to work on tablet devices
  * Attachment reminder plugin
  + many bug fixes</changelog>
<changelog author="aj@ajaissle.de" date="1397131200">- Remove possible 'leftover' SQL directory from document root,
  preventing upgrades from versions &gt; 0.9.5 [bnc#872790]</changelog>
<changelog author="aj@ajaissle.de" date="1399809600">- Update to 1.0.1
  * Support 'error' and 'body_file' return attribs in 'message_before_send' hook (#1489595)
  * Apply user-specific replacements to group's base_dn property (#1489779)
  * Fix missing email address when importing contacts from outlook csv (#1489830)
  * Fix bug where "With attachment" option in search filter wasn't selected after return from mail view (#1489774)
  * Fix "washing" of unicoded style attributes (#1489777)
  * Fix unintentional redirect from compose page in Webkit browsers (#1489789)
  * Fix messages index cache update under some conditions (e.g. proxy) (#1489756)
  * Fix lack of translation of special folders in some configurations (#1489799)
  * Fix XSS issue in plain text spellchecker (#1489806)
  * Fix invalid page title for some folders (1489804)
  * Fix redundant alert message on over-size uploads (#1489817)
  * Fix next message display after removing a message (#1489800)
  * Fix missing Mail-Followup-To header in sent mail (#1489829)
  * Fix error when spell-checking an empty text (#1489831)
  * Avoid popupmenus being closed when scrollbar is clicked (#1489832)
  * Add proxy_whitelist configuration option (#1489729)
  * Fix identities_level=4 handling in new_user_dialog plugin (#1489840)
  * Fix various db_prefix issues (#1489839)
  * Fix too small length of users.preferences column data type on MySQL
  * Fix redundant warning when switching from html to text in empty editor (#1489819)
  * Fix invalid host validation on login (#1489841)
  * Fix IMAP connection test in installer so it is aware of imap_auth_type (#1489746)</changelog>
<changelog author="jamesp@vicidial.com" date="1403524800">- Modify roundcubemail-httpd.conf for OpenSuSE v.13.1 apache2
    o Apache2 on OpenSuSE v.13.1 has the mod_access_compat.c module
    statically compiled into the Apache2 core. This means it can't
    be unloaded and the older pre-2.4 access directives must be
    used. Since it is not advised to mix pre and post 2.4 access
    methods the file had to be modified to look for this static
    module and load pre-2.4 directives if found on Apache 2.4. It
    should be forward compatible if the mod_access_compat.c module
    become dynamic in the future and is not loaded.</changelog>
<changelog author="aj@ajaissle.de" date="1405857600">- Update to 1.0.2
  * Fix storing unsaved drafts in localStorage (#1489818)
  * Fix redundant horizontal scrollbar in HTML editor (#1489950)
  * Fix PHP error in Preferences when default_folders was in dont_override (#1489940)
  * Add configurable LDAP_OPT_DEREF option (#1489864)
  * Fix unintentional draft autosave request if autosave is disabled (#1489882)
  * Fix malformed References: header in send/saved mail (#1489891)
  * Fix handling unicode characters in links (#1489898)
  * Fix incorrect handling of HTML comments in messages sanitization code (#1489904)
  * Fix so current page is reset on list-mode change (#1489907)
  * Fix so responses menu hides on click in classic skin (#1489915)
  * Fix unintentional line-height style modification in HTML messages (#1489917)
  * Fix broken normalize_string(), add support for ISO-8859-2 (#1489918)
  * Support csv contacts import in German localization (#1489920)
  * Fix so message list and counters are updated when a message is opened in new window (#1489919)
  * Fix malformed recipient name when composing a message by clicking on mailto link (#1489942)
  * Fix list reload after sending message in another window (#1489931)
  * Fix so address format errors are ignored when saving a draft (#1489954)
  * Fix incorrect label translation in return receipt (#1489963)
  * Fix security issue in delete-response action - allow only ajax request
  * Fix Delete button state after deleting identity/response (#1489972)
  * Fix bug where contacts with no email address were listed on compose addressbook (#1489970)
  * Fix images import from various vCard formats (#1489977)
  * Fix sorting messages by size on servers without SORT capability (#1489981)</changelog>
<changelog author="aj@ajaissle.de" date="1411992000">- Update to 1.0.3
    Fix insert-signature command in external compose window if opened from inline compose screen (#1490074)
    Initialize HTML editor before restoring a message from localStorage (#1490016)
    Add 'sig_max_lines' config option to default config file (#1490071)
    Add option to specify IMAP connection socket parameters - imap_conn_options (#1489948)
    Add option to set default message list mode - default_list_mode (#1487312)
    Enable contextmenu plugin for TinyMCE editor (#1487014)
    Fix some mime-type to extension mapping checks in Installer (#1489983)
    Fix errors when using localStorage in Safari's private browsing mode (#1489996)
    Fix bug where $Forwarded flag was being set even if server didn't support it (#1490000)
    Fix various iCloud vCard issues, added fallback for external photos (#1489993)
    Fix invalid Content-Type header when send_format_flowed=false (#1489992)
    Fix errors when adding/updating contacts in active search (#1490015)
    Fix incorrect thumbnail rotation with GD and exif orientation data (#1490029)
    Fix contacts list update after adding/deleting/moving a contact (#1490028, #1490033)
    Fix handling of email addresses with quoted domain part (#1490040)
    Fix comm_path update on task switch (#1490041)
    Fix error in MSSQL update script 2013061000.sql (#1490061)
    Fix validation of email addresses with IDNA domains (#1490067)</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post scripts</changelog>
<changelog author="aj@ajaissle.de" date="1418904000">- Update to 1.0.4
    Disable TinyMCE contextmenu plugin as there are more cons than pros in using it (#1490118)
    Fix bug where show_real_foldernames setting wasn't honored on compose page (#1490153)
    Fix issue where Archive folder wasn't protected in Folder Manager (#1490154)
    Fix compatibility with PHP 5.2. in rcube_imap_generic (#1490115)
    Fix setting flags on servers with no PERMANENTFLAGS response (#1490087)
    Fix regression in SHAA password generation in ldap driver of password plugin (#1490094)
    Fix displaying of HTML messages with absolutely positioned elements in Larry skin (#1490103)
    Fix font style display issue in HTML messages with styled &lt;span&gt; elements (#1490101)
    Fix download of attachments that are part of TNEF message (#1490091)
    Fix handling of uuencoded messages if messages_cache is enabled (#1490108)
    Fix handling of base64-encoded attachments with extra spaces (#1490111)
    Fix handling of UNKNOWN-CTE response, try do decode content client-side (#1490046)
    Fix bug where creating subfolders in shared folders wasn't possible without ACL extension (#1490113)
    Fix reply scrolling issue with text mode and start message below the quote (#1490114)
    Fix possible issues in skin/skin_path config handling (#1490125)
    Fix lack of delimiter for recipient addresses in smtp_log (#1490150)
    Fix generation of Blowfish-based password hashes (#1490184)
    Fix bugs where CSRF attacks were still possible on some requests</changelog>
<changelog author="aj@ajaissle.de" date="1422792000">- Update to 1.0.5
    Fix bug where some valid text in a message was handled as uuencoded attachment
    Fix wrong icon for download button in classic skin
    Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208)
    Fix checks based on window.ActiveXObject in IE &gt; 10
    Fix XSS issue in style attribute handling (#1490227)
    Fix bug where Drafts list wasn't updated on draft-save action in new window (#1490225)
    Fix so "set as default" option is hidden if identities_level &gt; 1 (#1490226)
    Fix bug where search was reset after returning from compose visited for reply
    Fix javascript error in "IE 8.0/Tablet PC" browser (#1490210)
    Fix bug where empty fieldmap config entries caused empty results of ldap search (#1490229)
- Update to 1.1-rc (1.0.95)</changelog>
<changelog author="aj@ajaissle.de" date="1422792001">- Update to 1.1-rc (1.0.95)
    Update jQuery to version 2.1.3
    Improve system security by using optional special URL with security token - use_secure_urls
    Allow to define separate server/path for image/js/css files - assets_url/assets_dir
    Sync vendor folder if exists in source package (#1490145)
    Avoid useless reloading list when resetting search with active filter (#1490057)
    Fix invalid folder selection if clicked while busy (#1490158)
    Fix import of multiple contact email addresses from Outlook-csv format (#1490169)
    Fix drag-n-drop to folders expanded while dragging (#1490157)
    Fix import of multiple contact groups from Google-csv format (#1490159)
    Fix import of contacts with multiple email addresses from Google-csv format (#1490178)
    Fix bugs where CSRF attacks were still possible on some requests
    Fix some rcube_utils::anytodatetime() corner cases with timezone mismatches (#1490163)
    Improve move-to and contact-export button in classic skin (#1490166)
    Fix wrong icon for download button in classic skin
    Fix bug where sent message was saved in Sent folder even if disabled by user (#1490208)
- Update to 1.1-beta (1.0.90)
    Fix skin path handling in plugin context (#1488967)
    Prevent memory exhaustion on image resizing with GD on Windows (#1489937)
    Add plugin hook for database table name lookups as requested in #1489837
    Added Oracle database support
    Support contacts import in GMail CSV format
    Added namespace filter in Folder Manager
    Added folder searching in Folder Manager
    Fix restoring draft messages from localStorage if editor mode differs (#1490016)
    Added config option/user preference to disable saving messages in localStorage (#1489979)
    Added config option 'imap_log_session' to enable Roundcube &lt;-&gt; IMAP session ID logging
    Added config option 'log_session_id' to control the length of the session identifier in logs
    Implemented 'storage_connected' API hook after successful IMAP login (#1490025)
    Integrate Net_LDAP3 and rcube_ldap_generic classes
    Add option (disabled_actions) to disable UI elements/actions (#1489638)
    Support password encryption using openssl extension (#1489989)
    Create/rename groups in UI dialogs (#1489951)
    Added 'contact_search_name' option to define autocompletion entry format
    Display quota information for current folder not INBOX only (#1487993)
    Support images in HTML signatures (#1488676)
    Display full quota information in popup (#1485769, #1486604)
    Mail compose: Selecting contact inserts recipient to previously focused input - to/cc/bcc accordingly (#1489684)
    Close "no subject" prompt with Enter key (#1489580)
    Password: Add option to force new users to change their password (#1486884)
    Improve support for screen readers and assistive technology using WCAG 2.0 and WAI ARIA standards
    Enable basic keyboard navigation throughout the UI (#1487845)
    Select/scroll to previously selected message when returning from message page (#1489023)
    Display a warning if popup window was blocked (#1489618)
    Remove (was: ...) from message subject on reply (#1489375)
    Update to TinyMCE 4.1 (#1489057)
    Enable autolink plugin in TinyMCE (#1488845)
    Support image operations with Imagick extension (#1489734)
    Support upload progress with session.upload_progress and PECL uploadprogress module (#1488702)
    Make identity name field optional (#1489510)
    Utility script to remove user records from the local database
    Plugin API: Added message_saved hook (#1489752)
    Plugin API: Added imap_search_before hook
    Support messages import from zip archives
    Zipdownload: Added mbox format support (#1486069)
    Drop support for IE6, move IE7/IE8 support to legacy_browser plugin
    Update to jQuery-2.1.1
    Search across multiple folders (#1485234)
    Improve UI integration of ACL settings
    Drop support for PHP &lt; 5.3.7
    Set In-Reply-To and References for forwarded messages (#1489593)
    Removed redundant default_folders config option (#1489737)
    Implemented IMAP SPECIAL-USE extension support [RFC6154] (#1487830)
    Optimize some framed pages content for better performance (#1489792)
    Improve text messages display and conversion to HTML (#1488937)
    Don't remove links when html signature is converted to text (#1489621)
    Fix page title when using search filter (#1490023)
    Fix mbox files import
    Fix some character sets detection (#1490135)
    Fix so attachment charset is set in headers of forward/draft message (#1490109)
    Fix bug where wrong charset could be used for text attachment preview page (#1490106)
    Fix setting flags on servers with no PERMANENTFLAGS response (#1490087)
    Fix regression in SHAA password generation in ldap driver of password plugin (#1490094)
    Fix displaying of HTML messages with absolutely positioned elements in Larry skin (#1490103)
    Fix font style display issue in HTML messages with styled &lt;span&gt; elements (#1490101)
    Fix download of attachments that are part of TNEF message (#1490091)
    Fix handling of uuencoded messages if messages_cache is enabled (#1490108)
    Fix handling of base64-encoded attachments with extra spaces (#1490111)
    Fix handling of UNKNOWN-CTE response, try do decode content client-side (#1490046)
    Fix bug where creating subfolders in shared folders wasn't possible without ACL extension (#1490113)
    Fix reply scrolling issue with text mode and start message below the quote (#1490114)
    Fix possible issues in skin/skin_path config handling (#1490125)
- Rebased roundcubemail-0.9.1_config-dir.patch as roundcubemail-1.1-beta-config_dir.patch</changelog>
<changelog author="aj@ajaissle.de" date="1423569600">- Update to 1.1.0
  New features:
  - Allow searching across multiple folders
  - Improved support for screen readers and assistive technology using
    WCAG 2.0 andWAI ARIA standards
  - Update to TinyMCE 4.1 to support images in HTML signatures (copy &amp; paste)
  - Added namespace filter and folder searching in folder manager
  - New config option to disable UI elements/actions
  - Stronger password encryption using OpenSSL
  - Support for the IMAP SPECIAL-USE extension
  - Support for Oracle as database backend
  - Manage 3rd party libs with Composer
  - Secure URLs [1] (disabled by default)
  Changelog:
    Make SMTP error log more verbose - include server response and error code
    Fix download options menu (added by zipdownload plugin) in classic skin (#1490228)
    Fix blocked.gif image usage with assets_dir set
    Fix bug where max_group_members was ignored when adding a new contact (#1490214)
    Hide MDN and DSN options in compose if disabled by admin (#1490221)
    Fix checks based on window.ActiveXObject in IE &gt; 10
    Fix XSS issue in style attribute handling (#1490227)
    Fix bug where Drafts list wasn't updated on draft-save action in new window (#1490225)
    Fix so "set as default" option is hidden if identities_level &gt; 1 (#1490226)
    Fix bug where search was reset after returning from compose visited for reply
    Fix javascript error in "IE 8.0/Tablet PC" browser (#1490210)
    Fix bug where Reply-To address was ignored on reply to messages sent by self (#1490233)
    Fix bug where empty fieldmap config entries caused empty results of ldap search (#1490229)
    Fix bug where drafts list wasn't refreshed after draft message was sent from another window (#1490238)
    Fix keyboard navigation and css in datepicker widget across many Firefox versions
    Fix false warning when opening attached text/plain files (#1490241)
    Fix bug where signature could have been inserted twice after plain-to-html switch (#1490239)
    Fix security issue in DBMail driver of password plugin (#1490261)
    Enable FollowSymLinks? option in .htaccess file which is required by rewrite rules (#1490255)
    Fix so JSON.parse() errors on localStorage items are ignored (#1490249)
  [1] http://trac.roundcube.net/wiki/Howto_Config/Secure_URLs</changelog>
<changelog author="aj@ajaissle.de" date="1427371200">- Update to 1.1.1
    ACL: Allow other plugins to adjust the list of permissions and groups to edit
    Add possibility to print contact information (of a single contact)
    Add possibility to configure max_allowed_packet value for all database engines (#1490283)
    Improved handling of storage errors after message is sent
    Update to TinyMCE 4.1.9
    Unified request* event arguments handling, added support for _unlock and _action parameters
    Security: Generate random hash for the per-user local storage prefix (#1490279)
    Fix refreshing of drafts list when sending a message which was saved in meantime (#1490238)
    Fix saving/sending emoticon images when assets_dir is set
    Fix PHP fatal error when visiting Vacation interface and there's no sieve script yet (#1490292)
    Fix setting max packet size for DB caches and check packet size also in shared cache
    Fix needless security warning on BMP attachments display (#1490282)
    Fix handling of some improper constructs in format=flowed text as per the RFC3676[4.5] (#1490284)
    Fix performance of rcube_db_mysql::get_variable()
    Fix missing or not up-to-date CATEGORIES entry in vCard export (#1490277)
    Fix fatal errors on systems without mbstring extension or mb_regex_encoding() function (#1490280)
    Fix cursor position on reply below the quote in HTML mode (#1490263)
    Fix so "over quota" errors are displayed also in message compose page
    Fix duplicate entries supression in autocomplete result (#1490290)
    Fix "Non-static method PEAR::isError() should not be called statically" errors (#1490281)
    Fix parsing invalid HTML messages with BOM after &lt;!DOCTYPE&gt; (#1490291)
    Fix duplicate entry on timezones list in rcube_config::timezone_name_from_abbr() (#1490293)
    Fix so localized folder name is displayed in multi-folder search result (#1490243)
    Fix javascript error after creating a folder which is a subfolder of another one (#1490297)
    Fix bug where subject of sent/saved message was removed if mbstring wasn't installed (#1490295)
    Fix missing vcard_attachment icon on messages list (#1490303)
    Fix storing signatures with big images in MySQL database (#1490306)
    Fix Opera browser detection in javascript (#1490307)
    Fix so search filter, scope and fields are reset on folder change
    Fix rows count when messages search fails (#1490266)
    Fix bug where spellchecking in HTML editor do not work after switching editor type more than once (#1490311)
    Fix bug where TinyMCE area height was too small on slow network connection (#1490310)
    Fix backtick character handling in sql queries (#1490312)
    Fix redirect URL for attachments loaded in an iframe when behind a proxy (#1490191)
    Fix menu container references to point to the actual &lt;ul&gt; element (#1490313)
    Fix javascripts errors in IE8 - lack of Event.which, focusing a hidden element (#1490318)</changelog>
<changelog author="draht@schaltsekun.de" date="1433764800">- Update to 1.1.2
    Add new plugin hook 'identity_create_after' providing the ID of the inserted identity (#1490358)
    Add option to place signature at bottom of the quoted text even in top-posting mode [sig_below]
    Fix handling of %-encoded entities in mailto: URLs (#1490346)
    Fix zipped messages downloads after selecting all messages in a folder (#1490339)
    Fix vpopmaild driver of password plugin
    Fix PHP warning: Non-static method PEAR::setErrorHandling() should not be called statically (#1490343)
    Fix tables listing routine on mysql and postgres so it skips system or other database tables and views (#1490337)
    Fix message list header in classic skin on window resize in Internet Explorer (#1490213)
    Fix so text/calendar parts are listed as attachments even if not marked as such (#1490325)
    Fix lack of signature separator for plain text signatures in html mode (#1490352)
    Fix font artifact in Google Chrome on Windows (#1490353)
    Fix bug where forced extwin page reload could exit from the extwin mode (#1490350)
    Fix bug where some unrelated attachments in multipart/related message were not listed (#1490355)
    Fix mouseup event handling when dragging a list record (#1490359)
    Fix bug where preview_pane setting wasn't always saved into user preferences (#1490362)
    Fix bug where messages count was not updated after message move/delete with skip_deleted=false (#1490372)
    Fix security issue in contact photo handling (#1490379)
    Fix possible memcache/apc cache data consistency issues (#1490390)
    Fix bug where imap_conn_options were ignored in IMAP connection test (#1490392)
    Fix bug where some files could have "executable" extension when stored in temp folder (#1490377)
    Fix attached file path unsetting in database_attachments plugin (#1490393)
    Fix issues when using moduserprefs.sh without --user argument (#1490399)
    Fix potential info disclosure issue by protecting directory access (#1490378)
    Fix blank image in html_signature when saving identity changes (#1490412)
    Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key (#1490402)
    Fix XSS vulnerability in _mbox argument handling (#1490417)</changelog>
<changelog author="aj@ajaissle.de" date="1442318400">- Update to 1.1.3
    Fix closing of nested menus (#1490443)
    Fix so E_DEPRECATED errors from PEAR libs are ignored by error_reporting change (#1490281)
    Fix compatibility with PHP 5.3 in rcube_ldap class (#1490424)
    Get rid of Mail_mimeDecode package dependency (#1490416)
    Fix "Importing..." message does not hide on error (#1490422)
    Fix SQL error on logout when using session_storage=php (#1490421)
    Update to jQuery 2.1.4 (#1490406)
    Fix Compose action in addressbook for results from multiple addressbooks (#1490413)
    Fix bug where some messages in multi-folder search couldn't be viewed/printed/downloaded (#1490426)
    Fix unintentional messages list page change on page switch in compose addressbook (#1490427)
    Fix race-condition in saving user preferences and loading plugin config (#1490431)
    Fix so plain text signature field uses monospace font (#1490435)
    Fix so links with href == content aren't added to links list on html to text conversion (#1490434)
    Fix handling of non-break spaces in html to text conversion (#1490436)
    Fix self-reply detection issues (#1490439)
    Fix multi-folder search result sorting by arrival date (#1490450)
    Fix so *-request@ addresses in Sender: header are also ignored on reply-all (#1490452)
    Update to TinyMCE 4.1.10 (#1490405)
    Fix draft removal after a message is sent and storing sent message is disabled (#1490467)
    Fix so imap folder attribute comparisons are case-insensitive (#1490466)
    Fix bug where new messages weren't added to the list in search mode
    Fix wrong positioning of message list header on page scroll in Webkit browsers (#1490035)
    Fix some javascript errors in rare situations (#1490441)
    Fix error when using back button after sending an email (#1490009)
    Fix removing signature when switching to identity with an empty sig in HTML mode (#1490470)
    Disable links list generation on html-to-text conversion of identities or composed message (#1490437)
    Fix "washing" of style elements wrapped into many lines
    Fix so input field (e.g. search box) does not loose focus on list load (#1490455)
    Fix minor XSS issue in drag-n-drop file uploads (#1490530)</changelog>
<changelog author="aj@ajaissle.de" date="1445601600">- Changed roundcubemail-httpd.conf
- Enable mod_version.c per default [boo#938840]</changelog>

</package>
<package pkgid="23297fee60d08addd48e17f46603c4f24b4ca77ebc74f23ef88a75c8cf84a373" name="samba" arch="src">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="c084ef4f40649f0b7d403faa5309ad6458e095c74aa5b0368d6354fe3b8c399a" name="samba" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4e4b63919c8c6a5c4cb8db0505e188d13f98bdac5e49c6d7af31e528a181a871" name="samba-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="69cd7d8aab95702119242bc48d89785574071b4230a7edea722bb057e9f3f9e5" name="samba-client" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="e91a00848d5e18edc0b7537ee5ceeac06ab4bfc67884c52b1a0983699347b53a" name="samba-client-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="04913c55208940672f523220f9edfa6039436d8e83cd72ea674c221c647216d6" name="samba-client-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="51312d8eb008478e6153b634a57bd97e8bdf2b27a4b08594c8abcb067143c7f3" name="samba-client-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="d1e4017a59e2b8452259bf731b278b9142eff58a71fcd1073ffd11442f4ae566" name="samba-core-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="1d8cfed6800ec4229453dda05f2147c458c059721dddfe24094b401a817b6ade" name="samba-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="f6db26d30ba1dec8c6deaecfb7bbce2b4bb7c420a0238e52ba56ccdb8b28031f" name="samba-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="10fa21a80c73e024d0daa2e788992753bf77dd2c179486a9ea111954a83ba0e6" name="samba-debugsource" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="868481bb81ba623d552cba67d8a25e7373b2bdd55167e3ec5caf716bb99acdd9" name="samba-doc" arch="noarch">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="406db7e171bc9bb07393263a8d090c5cf85c7c8980f52d51d928396ae254581c" name="samba-libs" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="0a4df8f850c8a6ad282ec0af3bfcebf63fd6224e2f02b1e352e840a0c442ce9b" name="samba-libs-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="32dffac1b2d2d5502819654f71e503a7cd9b377f4e07b61236eaf4bd06fb24ac" name="samba-libs-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="4b8816fab74fe8aaf2e216e2b5af1b7815ef1e1e2f637e71c6403aec17426edb" name="samba-libs-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="13e79d68d5ca56ed89f030327ac4b28c4a9d715a6ed9b287c788f04293794d75" name="samba-pidl" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="41647e0f839bc5c04342a401a36bfd07d4a4a9d8d92d7d6d2cba25fb3954fb73" name="samba-python" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="fae119ff93a49bc2f7593626a8e7093578433205900e8bfc7c29b7577a164491" name="samba-python-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="9f0503f87562a3c54e38eae106567905b8fbb083b2373e6c68f1084b7a87c583" name="samba-test" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="ba78dcc05d33a7490b5298c3a5e535e7a7ac37fb407652e369e2db13f79b7add" name="samba-test-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="f3b36d59403f61cd09dd2218bae767f7b3c35b497ca3f3987e28a6827b0e9c5d" name="samba-test-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="a2f9c49bd79eb32f554c76cb00c3f62c4cd792a467e9ee1ddb85b91c38765021" name="samba-winbind" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="d24c9afa34b4fc60481b866636ec228550a235554598acfbe269f177a0b5a6f4" name="samba-winbind-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="b0f2609e026d524010b56109a549c52b53f0c399e2439162e34c59c1ab05ab82" name="samba-winbind-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="83152c5c671b1e95d3be1d8da32f18aa99046a78341154d2ce1138ac769df4b2" name="samba-winbind-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="6.3"/>

<changelog author="lmuelle@suse.com" date="1429185600">- Prevent samba package updates from disabling samba kerberos printing.</changelog>
<changelog author="lmuelle@suse.com" date="1429185601">- Update to 4.2.1.
  + s3:winbind:grent: Don't stop group enumeration when a group has no gid;
    (bso#8905).
  + Initialize dwFlags field of DNS_RPC_NODE structure; (bso#9791).
  + s3: lib: ntlmssp: If NTLMSSP_NEGOTIATE_TARGET_INFO isn't set, cope with
    servers that don't send the 2 unused fields; (bso#10016).
  + build:wafadmin: Fix use of spaces instead of tabs; (bso#10476).
  + waf: Fix the build on openbsd; (bso#10476).
  + s3: client: "client use spnego principal = yes" code checks wrong name;
    (bso#10888).
  + spoolss: Retrieve published printer GUID if not in registry; (bso#11018).
  + s3: lib: libsmbclient: If reusing a server struct, check every cli-&gt;timout
    miliseconds if it's still valid before use; (bso#11079).
  + vfs_fruit: Enhance handling of malformed AppleDouble files; (bso#11125).
  + backupkey: Explicitly link to gnutls and gcrypt; (bso#11135).
  + replace: Remove superfluous check for gcrypt header; (bso#11135).
  + Backport subunit changes; (bso#11137).
  + libcli/auth: Match Declaration of netlogon_creds_cli_context_tmp with
    implementation; (bso#11140).
  + s3-winbind: Fix cached user group lookup of trusted domains; (bso#11143).
  + talloc: Version 2.1.2; (bso#11144).
  + Update libwbclient version to 0.12; (bso#11149).
  + brlock: Use 0 instead of empty initializer list; (bso#11153).
  + s4:auth/gensec_gssapi: Let gensec_gssapi_update() return
    NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164).
  + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169);
    (bnc#913304).
  + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev
    fails in the SMB1 case; (bso#11173).
  + backupkey: Use ndr_pull_struct_blob_all(); (bso#11174).
  + Fix lots of winbindd zombie processes on Solaris platform; (bso#11175).
  + s3: libsmbclient: Add missing talloc stackframe; (bso#11177).
  + s4-process_model: Do not close random fds while forking; (bso#11180).
  + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185).</changelog>
<changelog author="lmuelle@suse.com" date="1430913600">- Drop redundant doc attribute from man pages.</changelog>
<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="lmuelle@suse.com" date="1432900800">- Update to 4.2.2.
  + s3:smbXsrv: refactor duplicate code into
    smbXsrv_session_clear_and_logoff(); (bso#11182).
  + gencache: don't fail gencache_stabilize if there were records to delete;
    (bso#11260).
  + s3: libsmbclient: After getting attribute server, ensure main srv pointer
    is still valid; (bso#11186).
  + s4: rpc: Refactor dcesrv_alter() function into setup and send steps;
    (bso#11236).
  + s3: smbd: Incorrect file size returned in the response of
    "FILE_SUPERSEDE Create"; (bso#11240).
  + Mangled names do not work with acl_xattr; (bso#11249).
  + nmbd rewrites browse.dat when not required; (bso#11254).
  + vfs_fruit: add option "nfs_aces" that controls the NFS ACEs stuff;
    (bso#11213).
  + s3:smbd: Add missing tevent_req_nterror; (bso#11224).
  + vfs: kernel_flock and named streams; (bso#11243).
  + vfs_gpfs: Error code path doesn't call END_PROFILE; (bso#11244).
  + s4: libcli/finddcs_cldap: continue processing CLDAP until all addresses
    are used; (bso#11284).
  + ctdb: check for talloc_asprintf() failure; (bso#11201).
  + spoolss: purge the printer name cache on name change; (bso#11210);
    (bnc#901813).
  + CTDB statd-callout does not scale; (bso#11204).
  + vfs_fruit: also map characters below 0x20; (bso#11221).
  + ctdb: Coverity fix for CID 1291643; (bso#11201).
  + Multiplexed RPC connections are not handled by DCERPC server; (bso#11225).
  + Fix terminate connection behavior for asynchronous endpoint with PUSH
    notification flavors; (bso#11226).
  + ctdb-scripts: Fix bashism in ctdbd_wrapper script; (bso#11007).
  + ctdb: Fix CIDs 1125615, 1125634, 1125613, 1288201 and 1125553; (bso#11201).
  + SMB2 should cancel pending NOTIFY calls with DELETE_PENDING if the
    directory is deleted; (bso#11257).
  + s3:winbindd: make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + 'sharesec' output no longer matches input format; (bso#11237).
  + waf: Fix systemd detection; (bso#11200).
  + CTDB: Fix portability issues; (bso#11202).
  + CTDB: Fix some IPv6-related issues; (bso#11203).
  + CTDB statd-callout does not scale; (bso#11204).
  + 'net ads dns gethostbyname' crashes with an error in TALLOC_FREE if you
    enter invalid values; (bso#11234).
  + libads: record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + lib/util: Include DEBUG macro in internal header files before samba_util.h;
    (bso#11033).</changelog>
<changelog author="lmuelle@suse.com" date="1433505600">- Remove fam-devel build-time dependency for post-6 RHEL systems.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1433592000">- Order winbind.service Before and Want nss-user-lookup target.</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1436875200">- Update to 4.2.3.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fixed fsmo transfer exception; (bso#10924).
  + winbindd: Sync secrets.ldb into secrets.tdb on startup; (bso#10991).
  + Logon via MS Remote Desktop hangs; (bso#11061).
  + s3: lib: util: Ensure we read a hex number as %x, not %u; (bso#11068).
  + tevent: Add a note to tevent_add_fd(); (bso#11141).
  + s3:param/loadparm: Fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-unix_msg: Remove socket file after closing socket fd; (bso#11217).
  + smbd: Fix a use-after-free; (bso#11218); (bnc#919309).
  + s3-rpc_server: Fix rpc_create_tcpip_sockets() processing of interfaces;
    (bso#11245).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + Add IPv6 support to ADS client side LDAP connects; (bso#11281).
  + Add IPv6 support for determining FQDN during ADS join; (bso#11282).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + Fix invalid write in ctdb_lock_context_destructor; (bso#11293).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + vfs_fruit: Add option "veto_appledouble"; (bso#11305).
  + tstream: Make socketpair nonblocking; (bso#11312).
  + idmap_rfc2307: Fix wbinfo '--gid-to-sid' query; (bso#11313).
  + Group creation: Add msSFU30Name only when --nis-domain was given;
    (bso#11315).
  + tevent_fd needs to be destroyed before closing the fd; (bso#11316).
  + Build fails on Solaris 11 with "‘PTHREAD_MUTEX_ROBUST’ undeclared";
    (bso#11319).
  + smbd/trans2: Add a useful diagnostic for files with bad encoding;
    (bso#11323).
  + Change sharesec output back to previous format; (bso#11324).
  + Robust mutex support broken in 1.3.5; (bso#11326).
  + Kerberos auth info3 should contain resource group ids available from
    pac_logon; winbindd: winbindd_raw_kerberos_login - ensure logon_info
    exists in PAC; (bso#11328); (bnc#912457).
  + s3:smb2_setinfo: Fix memory leak in the defer_rename case; (bso#11329).
  + tevent: Fix CID 1035381 Unchecked return value; (bso#11330).
  + tdb: Fix CID 1034842 and 1034841 Resource leaks; (bso#11331).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + pidl: Make the compilation of PIDL producing the same results if the
    content hasn't change; (bso#11356).
  + winbindd: Disconnect child process if request is cancelled at main
    process; (bso#11358).
  + vfs_fruit: Check offset and length for AFP_AfpInfo read requests;
    (bso#11363).
  + docs: Overhaul the description of "smb encrypt" to include SMB3
    encryption; (bso#11366).
  + s3:auth_domain: Fix talloc problem in connect_to_domain_password_server();
    (bso#11367).
  + ncacn_http: Fix GNUism; (bso#11371).</changelog>
<changelog author="lmuelle@suse.com" date="1437134400">- Remove libiniparser-devel build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441800000">- Update to 4.2.4.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + auth/credentials: If credentials have principal set, they are not
    anonymous anymore; (bso#11265).
  + Fix stream names with colon with "fruit:encoding = native"; (bso#11278).
  + s4:rpc_server/netlogon: Fix for NetApp; (bso#11291).
  + lib: Fix rundown of open_socket_out(); (bso#11316).
  + s3:lib: Fix some corner cases of open_socket_out_cleanup(); (bso#11316).
  + vfs:fruit: Implement copyfile style copy_chunk; (bso#11317).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + ctdb-daemon: Return correct sequence number for CONTROL_GET_DB_SEQNUM;
    (bso#11398).
  + ctdb-scripts: Support monitoring of interestingly named VLANs on bonds;
    (bso#11399).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).
  + ctdb-daemon: Improve error handling for running event scripts; (bso#11431).
  + ctdb-daemon: Check if updates are in flight when releasing all IPs;
    (bso#11432).
  + ctdb-build: Fix building of PCP PMDA module; (bso#11435).
  + Backport dcesrv_netr_DsRGetDCNameEx2 fixes; (bso#11454).
  + vfs_fruit: Handling of empty resource fork; (bso#11467).
  + Avoid quoting problems in user's DNs; (bso#11488).
  + s3-auth: Fix "map to guest = Bad uid"; (bso#9862).</changelog>
<changelog author="lmuelle@suse.com" date="1442404800">- Package /var/lib/samba/private/sock with 0700 permissions; (bnc#946051).</changelog>
<changelog author="lmuelle@suse.com" date="1442923200">- Do not provide libpdb0 from libsamba-passdb0 but add it to baselibs.conf
  instead; (bnc#942716).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>

</package>
<package pkgid="bbfde08010deae8d704f5f103f25c58092c2b1e7cf3bdba97dac9ee387489996" name="seamonkey" arch="src">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="acaf4bc1ec255d0d741a8b593bcc004ef78d8b8a2ce660eeb875468dd7fcff49" name="seamonkey" arch="x86_64">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="63fc39ca9c5649f3bc871478c4c1edd168ffa148dd013b76d7d8eb8bbff35bb6" name="seamonkey-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="92947b01c00fb3528a0e98f521395e18fd7873e0a7cecbba00cdffc3b5c739fd" name="seamonkey-debugsource" arch="x86_64">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="47ffc08818e5665edd271ff94ed1153ed2e11027e7922b7588dff20c885c0167" name="seamonkey-dom-inspector" arch="x86_64">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="4b6a396536bb937e9bc13e3e625884a43150d01f0ef249424575f276e35aea4d" name="seamonkey-irc" arch="x86_64">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="b179283f5e2e7d06def5280376d36fb306b4dd93db4402fd6177a586ab1d180e" name="seamonkey-translations-common" arch="x86_64">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="60479fd0ed11a372f6df78286b93180cf88aea1e42a2cc79749a17b49d01988d" name="seamonkey-translations-other" arch="x86_64">
    <version epoch="0" ver="2.39" rel="3.1"/>

<changelog author="wr@rosenauer.org" date="1395230400">- update to SeaMonkey 2.25 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1398772800">- update to SeaMonkey 2.26 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- added aarch64 porting patches
  * mozilla-aarch64-bmo-810631.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
- requires NSPR 4.10.3 and NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399982400">- fix translations packaging (bnc#877263)</changelog>
<changelog author="wr@rosenauer.org" date="1402920000">- update to SeaMonkey 2.26.1 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- requires NSPR 4.10.6
- build require makeinfo</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to SeaMonkey 2.29 (bnc#894370)
  * based on Gecko 32.0 including all security fixes outlined here
    https://www.mozilla.org/security/known-vulnerabilities/
  * removed obsolete patches
    mozilla-aarch64-bmo-810631.patch, mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963023.patch, mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963027.patch
    mozilla-ppc64le-build.patch, mozilla-ppc64le-javascript.patch,
    mozilla-ppc64le-libffi.patch, mozilla-ppc64le-mfbt.patch,
    mozilla-ppc64le-webrtc.patch, mozilla-ppc64le-xpcom.patch
  * rebased patches
- requires NSS 3.16.4
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)</changelog>
<changelog author="wr@rosenauer.org" date="1413288000">- update to SeaMonkey 2.30 (bnc#900941)
  * venkman debugger removed from application and therefore
    obsolete package seamonkey-venkman
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashisms in mozilla.sh and add-plugins.sh scripts</changelog>
<changelog author="wr@rosenauer.org" date="1416571200">- use platform specific build flags as in Firefox
  (including _constraints)
- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="wr@rosenauer.org" date="1417608000">- update to SeaMonkey 2.31 (bnc#908009)
  * requires NSS 3.17.2
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches</changelog>
<changelog author="pcerny@suse.com" date="1417694400">- enable some extensions using the addons sdk (e.g. Ghostery)
  (mozilla-seamonkey-sdk.patch) (bmo#1071048)</changelog>
<changelog author="meissner@suse.com" date="1418040000">- seamonkey-fix-signed-char.patch: fix build on platforms
  where char is unsigned (power/arm). (bmo#1085151)
- mozilla-fix-prototype.patch: add string.h includes
  for memcpy prototype (as used on bigendian architectures).</changelog>
<changelog author="wr@rosenauer.org" date="1420113600">- use GStreamer 1.0 from 13.2 on
- removed package support for distributions older than 12.3
  * removed mozilla-sle11.patch</changelog>
<changelog author="wr@rosenauer.org" date="1421496000">- update to SeaMonkey 2.32 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- removed obsolete mozilla-seamonkey-sdk.patch
- added mozilla-openaes-decl.patch to fix implicit declarations</changelog>
<changelog author="wr@rosenauer.org" date="1423310400">- update to SeaMonkey 2.32.1
  * fixed MailNews feeds not updating
  * fixed selected profile in Profile Manager not remembered
  * fixed opening a bookmark folder in tabs on Linux
  * fixed Troubleshooting Information (about:support) with the
    Modern theme</changelog>
<changelog author="wr@rosenauer.org" date="1426507200">- update to SeaMonkey 2.33 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4
- removed obsolete seamonkey-fix-signed-char.patch
- mozilla-xremote-client was removed upstream</changelog>
<changelog author="wr@rosenauer.org" date="1427025600">- update to SeaMonkey 2.33.1 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="antoine.belvire@laposte.net" date="1435406400">- Fix compilation issues:
  * Add mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch (bmo#1153109)
  * Add mozilla-reintroduce-pixman-code-path.patch (bmo#1136958)
  * Add mozilla-visitSubstr.patch (bmo#1108834)
  * Add mozilla-undef-CONST.patch (bmo#1111395)
  * Add mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch</changelog>
<changelog author="wr@rosenauer.org" date="1440849600">- update to SeaMonkey 2.35 (bnc#935979)
  * based on 38.1.1esr
  * requires NSPR 4.10.8 and NSS 3.19.2
- removed obsolete patches
  * mozilla-visitSubstr.patch
  * mozilla-undef-CONST.patch
  * mozilla-reintroduce-pixman-code-path.patch
  * mozilla-fix-prototype.patch
  * mozilla-disable-JEMALLOC_STATIC_SIZES-on-ppc.patch
- renamed mozilla-add-D_GLIBCXX_USE_CXX11_ABI-0-to-CXXFLAG.patch
  to mozilla-add-glibcxx_use_cxx11_abi.patch (sync with Firefox)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to SeaMonkey 2.38 (bnc#947003)
  * based on 41.0.1
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- removed obsolete patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
- added mozilla-no-stdcxx-check.patch</changelog>
<changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="af1ab5f5922f788d05875b0afd3f72e606460e5ee336f3ec1f752c1d761c1ca3" name="shadow" arch="src">
    <version epoch="0" ver="4.1.5.1" rel="16.1"/>

<changelog author="kukuk@suse.de" date="1348488000">- Initial package [FATE#314473]</changelog>
<changelog author="kukuk@suse.de" date="1348574400">- Fix spec file
- Adjust login.defs
  (shadow-login_defs.diff)
- Add userdel*.local script support and scrips
  (userdel-scripts.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348660800">- Add support for useradd.local
  (useradd-script.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348747200">- Implement CHARACTER_CLASS support
  (chkname-regex.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808000">- Fix default group value in /etc/default/useradd
  (useradd-default.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808001">- Fix getdef default variables (getdef-new-defs.diff)</changelog>
<changelog author="kukuk@suse.de" date="1360065600">- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]</changelog>
<changelog author="kukuk@suse.de" date="1379419200">- Add some fixes from Fedora:
  - shadow-4.1.5.1-backup-mode.patch: open backup file with correct
    permissions.
  - shadow-4.1.5.1-logmsg.patch: fix error message
  - shadow-4.1.5.1-errmsg.patch: print error reason
  - shadow-4.1.5.1-manfix.patch: fix manual page</changelog>
<changelog author="kukuk@suse.de" date="1384257600">- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)</changelog>
<changelog author="werner@suse.de" date="1385121600">- Stop any systemd user manager instance in case a user entry will
  be deleted (bnc#849870).  Nevertheless a running process requires
  the option --force for the userdel command.</changelog>
<changelog author="tbehrens@suse.com" date="1396267200">- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
  of the path</changelog>
<changelog author="tbehrens@suse.com" date="1417521600">- Add package dependency for aaa_base, fixing bnc#899409</changelog>
<changelog author="radmanic@suse.com" date="1438084800">- bnc#935203 Adds a comment to the man pages to mind that some
  settings are not evaluated if PAM is used</changelog>

</package>
<package pkgid="ab6618f36ccf540910373fc9813d2567a0f82b48c10f67f8009c31a0833a2d6d" name="shadow" arch="x86_64">
    <version epoch="0" ver="4.1.5.1" rel="16.1"/>

<changelog author="kukuk@suse.de" date="1348488000">- Initial package [FATE#314473]</changelog>
<changelog author="kukuk@suse.de" date="1348574400">- Fix spec file
- Adjust login.defs
  (shadow-login_defs.diff)
- Add userdel*.local script support and scrips
  (userdel-scripts.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348660800">- Add support for useradd.local
  (useradd-script.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348747200">- Implement CHARACTER_CLASS support
  (chkname-regex.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808000">- Fix default group value in /etc/default/useradd
  (useradd-default.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808001">- Fix getdef default variables (getdef-new-defs.diff)</changelog>
<changelog author="kukuk@suse.de" date="1360065600">- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]</changelog>
<changelog author="kukuk@suse.de" date="1379419200">- Add some fixes from Fedora:
  - shadow-4.1.5.1-backup-mode.patch: open backup file with correct
    permissions.
  - shadow-4.1.5.1-logmsg.patch: fix error message
  - shadow-4.1.5.1-errmsg.patch: print error reason
  - shadow-4.1.5.1-manfix.patch: fix manual page</changelog>
<changelog author="kukuk@suse.de" date="1384257600">- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)</changelog>
<changelog author="werner@suse.de" date="1385121600">- Stop any systemd user manager instance in case a user entry will
  be deleted (bnc#849870).  Nevertheless a running process requires
  the option --force for the userdel command.</changelog>
<changelog author="tbehrens@suse.com" date="1396267200">- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
  of the path</changelog>
<changelog author="tbehrens@suse.com" date="1417521600">- Add package dependency for aaa_base, fixing bnc#899409</changelog>
<changelog author="radmanic@suse.com" date="1438084800">- bnc#935203 Adds a comment to the man pages to mind that some
  settings are not evaluated if PAM is used</changelog>

</package>
<package pkgid="cdd88edf5f47a1cfbabef30653564487e0f141d27bf495a1f3942899de7cebd8" name="shadow-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.1.5.1" rel="16.1"/>

<changelog author="kukuk@suse.de" date="1348488000">- Initial package [FATE#314473]</changelog>
<changelog author="kukuk@suse.de" date="1348574400">- Fix spec file
- Adjust login.defs
  (shadow-login_defs.diff)
- Add userdel*.local script support and scrips
  (userdel-scripts.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348660800">- Add support for useradd.local
  (useradd-script.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348747200">- Implement CHARACTER_CLASS support
  (chkname-regex.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808000">- Fix default group value in /etc/default/useradd
  (useradd-default.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808001">- Fix getdef default variables (getdef-new-defs.diff)</changelog>
<changelog author="kukuk@suse.de" date="1360065600">- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]</changelog>
<changelog author="kukuk@suse.de" date="1379419200">- Add some fixes from Fedora:
  - shadow-4.1.5.1-backup-mode.patch: open backup file with correct
    permissions.
  - shadow-4.1.5.1-logmsg.patch: fix error message
  - shadow-4.1.5.1-errmsg.patch: print error reason
  - shadow-4.1.5.1-manfix.patch: fix manual page</changelog>
<changelog author="kukuk@suse.de" date="1384257600">- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)</changelog>
<changelog author="werner@suse.de" date="1385121600">- Stop any systemd user manager instance in case a user entry will
  be deleted (bnc#849870).  Nevertheless a running process requires
  the option --force for the userdel command.</changelog>
<changelog author="tbehrens@suse.com" date="1396267200">- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
  of the path</changelog>
<changelog author="tbehrens@suse.com" date="1417521600">- Add package dependency for aaa_base, fixing bnc#899409</changelog>
<changelog author="radmanic@suse.com" date="1438084800">- bnc#935203 Adds a comment to the man pages to mind that some
  settings are not evaluated if PAM is used</changelog>

</package>
<package pkgid="8189bb00ae4bbeb0bd47f8bfff0f96591db6bea73c7158ea9768b8bf241baea8" name="shadow-debugsource" arch="x86_64">
    <version epoch="0" ver="4.1.5.1" rel="16.1"/>

<changelog author="kukuk@suse.de" date="1348488000">- Initial package [FATE#314473]</changelog>
<changelog author="kukuk@suse.de" date="1348574400">- Fix spec file
- Adjust login.defs
  (shadow-login_defs.diff)
- Add userdel*.local script support and scrips
  (userdel-scripts.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348660800">- Add support for useradd.local
  (useradd-script.diff)</changelog>
<changelog author="kukuk@suse.de" date="1348747200">- Implement CHARACTER_CLASS support
  (chkname-regex.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808000">- Fix default group value in /etc/default/useradd
  (useradd-default.diff)</changelog>
<changelog author="kukuk@suse.de" date="1352808001">- Fix getdef default variables (getdef-new-defs.diff)</changelog>
<changelog author="kukuk@suse.de" date="1360065600">- Cleanup login.defs and enable ENCRYPT_METHOD [bnc#802006]</changelog>
<changelog author="kukuk@suse.de" date="1379419200">- Add some fixes from Fedora:
  - shadow-4.1.5.1-backup-mode.patch: open backup file with correct
    permissions.
  - shadow-4.1.5.1-logmsg.patch: fix error message
  - shadow-4.1.5.1-errmsg.patch: print error reason
  - shadow-4.1.5.1-manfix.patch: fix manual page</changelog>
<changelog author="kukuk@suse.de" date="1384257600">- Add ENCRYPT_METHOD_NIS for pam_unix.so (encryption_method_nis.diff)</changelog>
<changelog author="werner@suse.de" date="1385121600">- Stop any systemd user manager instance in case a user entry will
  be deleted (bnc#849870).  Nevertheless a running process requires
  the option --force for the userdel command.</changelog>
<changelog author="tbehrens@suse.com" date="1396267200">- Add patch useradd-mkdirs.diff: fix for bnc#865563, create all parts
  of the path</changelog>
<changelog author="tbehrens@suse.com" date="1417521600">- Add package dependency for aaa_base, fixing bnc#899409</changelog>
<changelog author="radmanic@suse.com" date="1438084800">- bnc#935203 Adds a comment to the man pages to mind that some
  settings are not evaluated if PAM is used</changelog>

</package>
<package pkgid="3fdba2f768af266d129d89bd2bfee53e41d4bca43b9fa4068dd1cc5b6713d760" name="squid" arch="src">
    <version epoch="0" ver="3.3.13" rel="3.1"/>

<changelog author="chris@computersalat.de" date="1350820800">- update to 3.2.3 (21 Oct 2012):
  - Regression: SMP crashes on startup with workers &gt; 1
  - Bug 3655: pinning failure breaks NTLM and Negotiate authentication
  - SMP: Allow a UFS cache_dir entry to coexist with a shared memory cache entry
  - HTTP/1.1: honour Cache-Control before Pragma:no-cache
  - HTTP/1.1: Cache-Control compliance upgrade
  - Remove obsoleted refresh_pattern ignore-no-cache option
  - Fix IPv6 enabled squidclient
  - ... and several compile fixes</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix build with glibc 2.17 (add patch squid-glibc217.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="chris@computersalat.de" date="1356868800">- Changes to squid-3.2.5 (10 Dec 2012):
  - Bug 3698: Add missing include of errno.h
- Changes to squid-3.2.4 (03 Dec 2012):
  - Ported: urllogin ACL from squid 2.7
  - Bug 3688: Lots of Orphan Comm:Connections to ICAP server
  - Bug 3677: Port un-pinning logic changes from squid 3.3
  - Bug 3405: ssl_crtd crashes failing to remove certificate
  - ... and major bugs fixed in squid 3.1.22
  - Fix accept_filter on Linux
  - Remove 'Bungled' warning on missing component directives
  - ... and many buffer and memory leak issues in the bundled helpers
  - ... and a small amount of code polishing
- remove obsolete glibc-217 patch</changelog>
<changelog author="chris@computersalat.de" date="1358078400">- Changes to squid-3.2.6 (09 Jan 2013):
  fix for bnc#794954, CVE-2012-5643, SQUID:2012-1
  - Regression Bug 3731: TOS setsockopt() requires int value
  - Regression Bug 3712: Rotating logs overwrites the previous log
  - Bug 3727: LLVM compile errors in kerberos_ldap_group
  - Bug 3650: Negotiate auth missing challenge token
  - Additional fixes for CVE-2012-5643 / SQUID:2012-1
  * http://www.squid-cache.org/Advisories/SQUID-2012_1.txt
  * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643
- rebase nobuilddates, config patches</changelog>
<changelog author="e.istomin@edss.ee" date="1361361600">- Changes to squid-3.2.7 (01 Feb 2013):
  * Bug 3736: Floating point exception due to divide by zero
  * Bug 3735: raw-IPv6 domain URLs crash if IPv6-disabled
  * Bug 3732: Fix ConnOpener IPv6 awareness
  * Bug 3729: 32-bit overflow in parsing 64-bit configuration values
  * Bug 3728: Improve debug for cache_dir
  * Bug 3687: unhandled exception: c when using interception and peers
  * Bug 3678: external acl grace period causes acl lookup failures
  * Bug 3567: Memory leak handling malformed requests
  * Bug 3111: Mid-term fix for the forward.cc "err" assertion
  * Support OpenSSL NO_Compression optio
  * Fix IPv6 enabled pinger on split-stack or IPv6-disabled systems
  * Fix "address.GetPort() != 0" assertion for helpers
  * ... and several minor memory leaks
  * ... and some cache.log message polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1363348800">- New revision for squid.service (using only sed)
  handle multiple cache_dir line
  Added sed as require
- Packaging : fixed systemd squid.service
  * Rework on squid.service ExecStartPre line
    remove dependency on unfunctionnal wrapper
  * Fix bnc#802635 (creating cache struture fail on first call)
  * Fixed Type=forking and remove the use off -N (non daemon flag)
  * Fixed missing pid file
  * Structural : add all -k to end of Exec/Stop line
  * Ulimit : Added LimitNOFile=4096 ( same value as in /etc/sysconfig)
    but there's no way to decode dynamically /etc/sysconfig
  * Remove syslog.target ( no need anymore : advise from fcrozat )
  * Clean up squid_cache_build.sh
- Changes to squid-3.2.9 (12 Mar 2013):
  * Regression fix: Accept-Language header parse
  * Bug 3673: Silence 'Failed to select source' messages
  * Fix authentication headers sent on peer digest requests
  * Fix build error on Solaris, OpenIndiana, Omnios
- Changes to squid-3.2.8 (02 Mar 2013):
  * Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client
  * Bug 3763: diskd Error: no filename in shm buffer
  * Bug 3752: objects that cannot be cached in memory are not cached on disk
  * Bug 3753: Removes the domain from the cache_peer server pconn key
  * Bug 3749: IDENT lookup using wrong ports to identify the user
  * Bug 3723: tcp_outgoing_tos/mark broken for CONNECT requests
  * Bug 3686: cache_dir max-size default fails
  * Bug 3515: crash in FtpStateData::ftpTimeout
  * Bug 3329: Quieten orphan Comm::Connection messages
  * Make squid -z for cache_dir rock preserve the rock DB
  * Fixed several server connect problems
  * ... and some build issues on Solaris, OpenIndiana, MacOS X
  * ... and some documentation and debugs polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1364126400">- Fixed squid.service
- Removed commented patch lines</changelog>
<changelog author="bruno@ioda-net.ch" date="1367323200">- Changes for squid 3.2.11 release (29 April 2013)
  * Fix enter_suid/leave_suid build errors in ip/Intercept.cc
  * GNU Hurd: define MAP_NORESERVE as no-op when missing
  * Bug #3833: Option '-k' is not present in squidclient man page
  * Bug #3817: Memory leak in SSL cert validate for alt_name peer certs
  * Bug #3822: Locate LDAP and SASL headers in /usr/local/include for BSD support
  * Bug #3825: basic_ncsa_auth segfaulting with glibc-2.17
  * Bug #3774: -k reconfigure drops rock
  * Bug #3565: Resuming postponed accept kills Squid
  * HTTP/1.1: partial support for no-cache and private controls with parameters
  * ssl_crtd: helpers dying during startup on ARM
  * Updated copyright for icons/SN.png squid-3.2-11813.patch
  * Revert r11810 - tools.h does not exist in 3.2 squid-3.2-11812.patch</changelog>
<changelog author="tchvatal@suse.com" date="1374753600">- Add patch squid-fix-pod2man-check.patch solving building with
  new perl.</changelog>
<changelog author="bruno@ioda-net.ch" date="1375012800">- Changes to squid-3.2.13 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.2.12 (11 Jul 2013):
  * Protect against buffer overrun in DNS query generation
  * Avoid !closing assertions when helpers call comm_read during reconfigure.
  * Fix several minor memory leaks during reconfigure
  * Remove origin_tries limiter on forwarding and permit large max_forward_tries values</changelog>
<changelog author="chris@computersalat.de" date="1378036800">- Changes to squid-3.3.8 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.3.7 (11 Jul 2013):
  * Bug 3297: Fix openSSL related build failures
  * Fix build on FreeBSD 9.x platform with clang
  * Protect against buffer overrun in DNS query generation
- Changes to squid-3.3.6 (01 Jul 2013):
  * Bug 3854: pt1: compile errors on AIX
  * Bug 3802: Fix wrong check inside Format::Format::assemble
  * Bug 3762: remove bogus WARNING in cache.log
  * Bug 3717: assertion failed with dstdom_regex with IP based URL
  * Bug 1991: kqueue causes SSL to hang
  * Ask for SSL key password when started with -N but without sslpassword_program
  * Make sure %&lt;tt includes all [failed] connection attempts
  * Support HTTP reply ACLs in icap_log and log_icap
  * Fix incorrect external_acl_type codes
  * Fix ICAP logging request headers and segmentation faults
  * ... and some documentation polish
- Changes to squid-3.3.5 (20 May 2013):
  * Bug 3851: Delay Pool class 5 tag:levels displayed incorrectly in cache manager
  * Bug 3845: http_port tcpkeepalive= option fails parsing
  * Bug 3840: assertion failed 'sde' in UFS cache loading
  * Bug 3836: make check failures with automake-1.13
  * Bug 3827: Remove AccessLogEntry::cache.authuser
  * Bug 3816 pt2: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3780: cachemgr.cgi: output problem in HTTP Header Statistics
  * Bug 3759: OpenSSL compilation error on stock Fedora17, RHEL, CentOS 6 systems
  * Bug 3744: squid terminated: FATAL: Bungled (null) line 3: sslproxy_cert_sign
    signTrusted all
  * Port from 2.6: external acl %ACL and %DATA tags
  * Update copyright on SN.png
  * ... and several minor memory leaks
  * ... and some documentation polish
- Changes to squid-3.3.4 (27 Apr 2013):
  * Bug 3831: basic_ncsa_auth Blowfish and SHA support
  * Bug 3816: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3794: MacOS: workaround compiler errors and case-insensitivity
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3720 pt1: SourceLayout: shuffle fd_table definition into fde.h
  * Bug 3720 pt2: Add missing include in /dev/poll I/O module
  * Bug 3674: Improve compiler detection, better support warnings-as-errors on clang
  * Add support for TPROXY on BSD
  * Fix SSL Bump bypass for intercepted traffic
  * Fix memory leaks in ConnStateData pinning
  * Fix external_acl.cc "inBackground" assertion on queue overloads
  * CacheMgr: fix missing column separator in helper stats
  * OpenBSD: libpthreads requires OpenBSD 5.2 or later
  * ... and lots of documentation updates
  * ... and all changes from squid 3.2.10
- Changes to squid-3.3.3 (12 Mar 2013):
  * Bug 3720: Add missing include in /dev/poll I/O module (pt2)
  * ... and all changes from squid 3.2.9
- Changes to squid-3.3.2 (02 Mar 2013):
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3794: MacOS: workaround compiler errors
  * Bug 3720: Compile error in Solaris /OpenIndiana
  * ... and all changes from squid 3.2.8
- Changes to squid-3.3.1 (09 Feb 2013):
  * Bug 3726: build errors with --disable-ssl
  * Propigate pinned connection persistency and closures to the client.
  * Mimic SSL certificate Key Usage and Basic Constraints
  * Fix segmentation fault on missing squid.conf values
  * ext_sql_session_acl: Fix hex decoding on UID
  * ... and some code polish
  * ... and a lot of documentation polish
  * ... and all changes from squid 3.2.7
- rebase patches
  * config, nobuilddates, compiled_without_RPM_OPT_FLAGS</changelog>
<changelog author="chris@computersalat.de" date="1378123200">- fix build for 1110 (SLES_11)
  * add configure --disable-strict-error-checking</changelog>
<changelog author="chris@computersalat.de" date="1378382400">- fix build for Factory
  * rework fix-pod2man-check</changelog>
<changelog author="chris@computersalat.de" date="1380369600">- Changes to squid-3.3.9 (11 Sep 2013):
  * Regression Bug 3077: off-by-one error in Digest header decoding
  * Bug 3895: fix acl_uses_indirect_client and cache_peer_access
  * Bug 3879: assertion failed ConnStateData::validatePinnedConnection
  * Bug 3863: myportname acl causes segmentation fault
  * Bug 3849: Duplicate certificate sent when using https_port
  * Bug 2287: Better fix for unsupported HTTP version handling
  * Bug 2112: Reload into If-None-Match
  * Fix several assert with side effects in ICAP/eCAP response handling
  * Fix myportname ACL on ICAP/eCAP transactions
  * Fix external ACL user:pass detail logging after adaptation
  * Fix SMP mgr:info report 'Largest file desc currently in use'
  * Improved compatibility with gcc 4.8, clang and icc
  * Show number of available filedescriptors when reserved FD changes
  * Sync with newest OpenSSL error codes
  * Register Http2-Settings header
  * ... and many Windows portability fixes
- fix changelog</changelog>
<changelog author="chris@computersalat.de" date="1387972800">- Changes to squid-3.3.11 (01 Dec 2013):
  * Regression Bug 3936: error-details.txt parse error with OpenSSL since 3.3.9
  * Bug 3972: Segfault when getting the deny_info page ID after a reconfigure
  * Bug 3970: max_filedescriptors disabled due to missing setrlimit
  * Bug 3967: ipc/Kid.cc compilation failure: 'time' was not declared in this scope
  * Bug 3960: DEAD cache_peer are not revived
  * Bug 3956: xstrndup: tried to dup a NULL pointer
  * Bug 3906: Filedescriptor leaks in SNMP
  * Bug 3782: Digest authentication not obeying nonce_max_count
  * HTTP/1.1: Make header parser obey relaxed_header_parser
  * HTTP/1.1: Re-compute Range response content offset after an FTP response was adapted
  * SMP: Replace blocking sleep(3) and close UDS socket on failures
  * Windows: fix several compile errors
- Changes to squid-3.3.10 (03 Nov 2013):
  * Bug 3929: request_header_add not working for tunnel requests
  * Bug 3923: cbdata and undefined behavior due to dynamic runtime enumeration
  * Bug 3918: Self Test Failures on Mac OS X 10.8
  * Bug 3887: tcp_outgoing_tos not working for IPv6
  * Bug 3836: Fix issues with automake 1.13+ and make check
  * Bug 3480: StoreEntry::kickProducer() segfaults in store_client::copy()
  * Fix pinning hierarchy log information
  * Fix close idle client connections associated with closed idle pinned connections.
  * Fix cbdata 'error: expression result unused' errors
  * Avoid "hot idle": A series of rapid select() calls with zero timeout.
  * Append Connection:close to OPTIONS requests when icap_persistent_connections is off
  * ntlm_fake_auth: pass DOMAIN data to Squid in original case
  * kerberos_ldap_group: fix LDAP string duplication
  * Use IPv6 localhost nameserver on DNS configuration errors
  * Add cache_miss_revalidate
  * ... and several portability improvements
- modified patches:
  * squid-compiled_without_RPM_OPT_FLAGS.patch
  * squid-config.patch
- fix build for SLE (libxml2-devel vs pkgconfig(libxml2))
- fix changed files
  * bindir/purge
  * bindir/squidclient</changelog>
<changelog author="draht@suse.de" date="1408017600">- squid-cert_tool_use_bash_not_ksh.patch:
  /usr/sbin/cert_tool should use bash, not ksh. [bnc#891313]</changelog>
<changelog author="meissner@suse.com" date="1409572800">- Changes to squid-3.3.13 (28 Aug 2014):
  - Fix segmentation fault setting up server SSL connnection
  - HTTP/1.1: Ignore Range headers with unidentifiable byte-range values
- Changes to squid-3.3.12 (09 Mar 2014):
  - Regression Bug 3769: client_netmask not evaluated since Comm redesign
  - Bug 4026: Fix SSL and adaptation_access handling of aborted connections
  - Bug 3969: Fix credentials caching for Digest authentication
  - Bug 3806: Caching responses with Vary header
  - Fix umask default on crash report generated email
  - Fix pthread library detection on FreeBSD 10
  - Avoid assertions on Range requests that trigger Squid-generated errors.
    (bnc#867533 CVE-2014-0128)</changelog>
<changelog author="jmatejek@suse.com" date="1418299200">- squid3-snmp-off-by-one.patch - fix off-by-one in snmp subsystem
  (CVE-2014-6270, bnc#895773)</changelog>
<changelog author="jkeil@suse.de" date="1445256000">- fix bsc#949942
  * squid:bsc_949942:CVE-2014-9749.patch
  * VUL-0: CVE-2014-9749: squid,squid3: Nonce replay vulnerability in Digest
    authentication</changelog>

</package>
<package pkgid="0f2e1aa14a01576a37468bd5cb4d50552c81327228497f1cbf37cf50b115c568" name="squid" arch="x86_64">
    <version epoch="0" ver="3.3.13" rel="3.1"/>

<changelog author="chris@computersalat.de" date="1350820800">- update to 3.2.3 (21 Oct 2012):
  - Regression: SMP crashes on startup with workers &gt; 1
  - Bug 3655: pinning failure breaks NTLM and Negotiate authentication
  - SMP: Allow a UFS cache_dir entry to coexist with a shared memory cache entry
  - HTTP/1.1: honour Cache-Control before Pragma:no-cache
  - HTTP/1.1: Cache-Control compliance upgrade
  - Remove obsoleted refresh_pattern ignore-no-cache option
  - Fix IPv6 enabled squidclient
  - ... and several compile fixes</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix build with glibc 2.17 (add patch squid-glibc217.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="chris@computersalat.de" date="1356868800">- Changes to squid-3.2.5 (10 Dec 2012):
  - Bug 3698: Add missing include of errno.h
- Changes to squid-3.2.4 (03 Dec 2012):
  - Ported: urllogin ACL from squid 2.7
  - Bug 3688: Lots of Orphan Comm:Connections to ICAP server
  - Bug 3677: Port un-pinning logic changes from squid 3.3
  - Bug 3405: ssl_crtd crashes failing to remove certificate
  - ... and major bugs fixed in squid 3.1.22
  - Fix accept_filter on Linux
  - Remove 'Bungled' warning on missing component directives
  - ... and many buffer and memory leak issues in the bundled helpers
  - ... and a small amount of code polishing
- remove obsolete glibc-217 patch</changelog>
<changelog author="chris@computersalat.de" date="1358078400">- Changes to squid-3.2.6 (09 Jan 2013):
  fix for bnc#794954, CVE-2012-5643, SQUID:2012-1
  - Regression Bug 3731: TOS setsockopt() requires int value
  - Regression Bug 3712: Rotating logs overwrites the previous log
  - Bug 3727: LLVM compile errors in kerberos_ldap_group
  - Bug 3650: Negotiate auth missing challenge token
  - Additional fixes for CVE-2012-5643 / SQUID:2012-1
  * http://www.squid-cache.org/Advisories/SQUID-2012_1.txt
  * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643
- rebase nobuilddates, config patches</changelog>
<changelog author="e.istomin@edss.ee" date="1361361600">- Changes to squid-3.2.7 (01 Feb 2013):
  * Bug 3736: Floating point exception due to divide by zero
  * Bug 3735: raw-IPv6 domain URLs crash if IPv6-disabled
  * Bug 3732: Fix ConnOpener IPv6 awareness
  * Bug 3729: 32-bit overflow in parsing 64-bit configuration values
  * Bug 3728: Improve debug for cache_dir
  * Bug 3687: unhandled exception: c when using interception and peers
  * Bug 3678: external acl grace period causes acl lookup failures
  * Bug 3567: Memory leak handling malformed requests
  * Bug 3111: Mid-term fix for the forward.cc "err" assertion
  * Support OpenSSL NO_Compression optio
  * Fix IPv6 enabled pinger on split-stack or IPv6-disabled systems
  * Fix "address.GetPort() != 0" assertion for helpers
  * ... and several minor memory leaks
  * ... and some cache.log message polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1363348800">- New revision for squid.service (using only sed)
  handle multiple cache_dir line
  Added sed as require
- Packaging : fixed systemd squid.service
  * Rework on squid.service ExecStartPre line
    remove dependency on unfunctionnal wrapper
  * Fix bnc#802635 (creating cache struture fail on first call)
  * Fixed Type=forking and remove the use off -N (non daemon flag)
  * Fixed missing pid file
  * Structural : add all -k to end of Exec/Stop line
  * Ulimit : Added LimitNOFile=4096 ( same value as in /etc/sysconfig)
    but there's no way to decode dynamically /etc/sysconfig
  * Remove syslog.target ( no need anymore : advise from fcrozat )
  * Clean up squid_cache_build.sh
- Changes to squid-3.2.9 (12 Mar 2013):
  * Regression fix: Accept-Language header parse
  * Bug 3673: Silence 'Failed to select source' messages
  * Fix authentication headers sent on peer digest requests
  * Fix build error on Solaris, OpenIndiana, Omnios
- Changes to squid-3.2.8 (02 Mar 2013):
  * Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client
  * Bug 3763: diskd Error: no filename in shm buffer
  * Bug 3752: objects that cannot be cached in memory are not cached on disk
  * Bug 3753: Removes the domain from the cache_peer server pconn key
  * Bug 3749: IDENT lookup using wrong ports to identify the user
  * Bug 3723: tcp_outgoing_tos/mark broken for CONNECT requests
  * Bug 3686: cache_dir max-size default fails
  * Bug 3515: crash in FtpStateData::ftpTimeout
  * Bug 3329: Quieten orphan Comm::Connection messages
  * Make squid -z for cache_dir rock preserve the rock DB
  * Fixed several server connect problems
  * ... and some build issues on Solaris, OpenIndiana, MacOS X
  * ... and some documentation and debugs polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1364126400">- Fixed squid.service
- Removed commented patch lines</changelog>
<changelog author="bruno@ioda-net.ch" date="1367323200">- Changes for squid 3.2.11 release (29 April 2013)
  * Fix enter_suid/leave_suid build errors in ip/Intercept.cc
  * GNU Hurd: define MAP_NORESERVE as no-op when missing
  * Bug #3833: Option '-k' is not present in squidclient man page
  * Bug #3817: Memory leak in SSL cert validate for alt_name peer certs
  * Bug #3822: Locate LDAP and SASL headers in /usr/local/include for BSD support
  * Bug #3825: basic_ncsa_auth segfaulting with glibc-2.17
  * Bug #3774: -k reconfigure drops rock
  * Bug #3565: Resuming postponed accept kills Squid
  * HTTP/1.1: partial support for no-cache and private controls with parameters
  * ssl_crtd: helpers dying during startup on ARM
  * Updated copyright for icons/SN.png squid-3.2-11813.patch
  * Revert r11810 - tools.h does not exist in 3.2 squid-3.2-11812.patch</changelog>
<changelog author="tchvatal@suse.com" date="1374753600">- Add patch squid-fix-pod2man-check.patch solving building with
  new perl.</changelog>
<changelog author="bruno@ioda-net.ch" date="1375012800">- Changes to squid-3.2.13 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.2.12 (11 Jul 2013):
  * Protect against buffer overrun in DNS query generation
  * Avoid !closing assertions when helpers call comm_read during reconfigure.
  * Fix several minor memory leaks during reconfigure
  * Remove origin_tries limiter on forwarding and permit large max_forward_tries values</changelog>
<changelog author="chris@computersalat.de" date="1378036800">- Changes to squid-3.3.8 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.3.7 (11 Jul 2013):
  * Bug 3297: Fix openSSL related build failures
  * Fix build on FreeBSD 9.x platform with clang
  * Protect against buffer overrun in DNS query generation
- Changes to squid-3.3.6 (01 Jul 2013):
  * Bug 3854: pt1: compile errors on AIX
  * Bug 3802: Fix wrong check inside Format::Format::assemble
  * Bug 3762: remove bogus WARNING in cache.log
  * Bug 3717: assertion failed with dstdom_regex with IP based URL
  * Bug 1991: kqueue causes SSL to hang
  * Ask for SSL key password when started with -N but without sslpassword_program
  * Make sure %&lt;tt includes all [failed] connection attempts
  * Support HTTP reply ACLs in icap_log and log_icap
  * Fix incorrect external_acl_type codes
  * Fix ICAP logging request headers and segmentation faults
  * ... and some documentation polish
- Changes to squid-3.3.5 (20 May 2013):
  * Bug 3851: Delay Pool class 5 tag:levels displayed incorrectly in cache manager
  * Bug 3845: http_port tcpkeepalive= option fails parsing
  * Bug 3840: assertion failed 'sde' in UFS cache loading
  * Bug 3836: make check failures with automake-1.13
  * Bug 3827: Remove AccessLogEntry::cache.authuser
  * Bug 3816 pt2: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3780: cachemgr.cgi: output problem in HTTP Header Statistics
  * Bug 3759: OpenSSL compilation error on stock Fedora17, RHEL, CentOS 6 systems
  * Bug 3744: squid terminated: FATAL: Bungled (null) line 3: sslproxy_cert_sign
    signTrusted all
  * Port from 2.6: external acl %ACL and %DATA tags
  * Update copyright on SN.png
  * ... and several minor memory leaks
  * ... and some documentation polish
- Changes to squid-3.3.4 (27 Apr 2013):
  * Bug 3831: basic_ncsa_auth Blowfish and SHA support
  * Bug 3816: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3794: MacOS: workaround compiler errors and case-insensitivity
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3720 pt1: SourceLayout: shuffle fd_table definition into fde.h
  * Bug 3720 pt2: Add missing include in /dev/poll I/O module
  * Bug 3674: Improve compiler detection, better support warnings-as-errors on clang
  * Add support for TPROXY on BSD
  * Fix SSL Bump bypass for intercepted traffic
  * Fix memory leaks in ConnStateData pinning
  * Fix external_acl.cc "inBackground" assertion on queue overloads
  * CacheMgr: fix missing column separator in helper stats
  * OpenBSD: libpthreads requires OpenBSD 5.2 or later
  * ... and lots of documentation updates
  * ... and all changes from squid 3.2.10
- Changes to squid-3.3.3 (12 Mar 2013):
  * Bug 3720: Add missing include in /dev/poll I/O module (pt2)
  * ... and all changes from squid 3.2.9
- Changes to squid-3.3.2 (02 Mar 2013):
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3794: MacOS: workaround compiler errors
  * Bug 3720: Compile error in Solaris /OpenIndiana
  * ... and all changes from squid 3.2.8
- Changes to squid-3.3.1 (09 Feb 2013):
  * Bug 3726: build errors with --disable-ssl
  * Propigate pinned connection persistency and closures to the client.
  * Mimic SSL certificate Key Usage and Basic Constraints
  * Fix segmentation fault on missing squid.conf values
  * ext_sql_session_acl: Fix hex decoding on UID
  * ... and some code polish
  * ... and a lot of documentation polish
  * ... and all changes from squid 3.2.7
- rebase patches
  * config, nobuilddates, compiled_without_RPM_OPT_FLAGS</changelog>
<changelog author="chris@computersalat.de" date="1378123200">- fix build for 1110 (SLES_11)
  * add configure --disable-strict-error-checking</changelog>
<changelog author="chris@computersalat.de" date="1378382400">- fix build for Factory
  * rework fix-pod2man-check</changelog>
<changelog author="chris@computersalat.de" date="1380369600">- Changes to squid-3.3.9 (11 Sep 2013):
  * Regression Bug 3077: off-by-one error in Digest header decoding
  * Bug 3895: fix acl_uses_indirect_client and cache_peer_access
  * Bug 3879: assertion failed ConnStateData::validatePinnedConnection
  * Bug 3863: myportname acl causes segmentation fault
  * Bug 3849: Duplicate certificate sent when using https_port
  * Bug 2287: Better fix for unsupported HTTP version handling
  * Bug 2112: Reload into If-None-Match
  * Fix several assert with side effects in ICAP/eCAP response handling
  * Fix myportname ACL on ICAP/eCAP transactions
  * Fix external ACL user:pass detail logging after adaptation
  * Fix SMP mgr:info report 'Largest file desc currently in use'
  * Improved compatibility with gcc 4.8, clang and icc
  * Show number of available filedescriptors when reserved FD changes
  * Sync with newest OpenSSL error codes
  * Register Http2-Settings header
  * ... and many Windows portability fixes
- fix changelog</changelog>
<changelog author="chris@computersalat.de" date="1387972800">- Changes to squid-3.3.11 (01 Dec 2013):
  * Regression Bug 3936: error-details.txt parse error with OpenSSL since 3.3.9
  * Bug 3972: Segfault when getting the deny_info page ID after a reconfigure
  * Bug 3970: max_filedescriptors disabled due to missing setrlimit
  * Bug 3967: ipc/Kid.cc compilation failure: 'time' was not declared in this scope
  * Bug 3960: DEAD cache_peer are not revived
  * Bug 3956: xstrndup: tried to dup a NULL pointer
  * Bug 3906: Filedescriptor leaks in SNMP
  * Bug 3782: Digest authentication not obeying nonce_max_count
  * HTTP/1.1: Make header parser obey relaxed_header_parser
  * HTTP/1.1: Re-compute Range response content offset after an FTP response was adapted
  * SMP: Replace blocking sleep(3) and close UDS socket on failures
  * Windows: fix several compile errors
- Changes to squid-3.3.10 (03 Nov 2013):
  * Bug 3929: request_header_add not working for tunnel requests
  * Bug 3923: cbdata and undefined behavior due to dynamic runtime enumeration
  * Bug 3918: Self Test Failures on Mac OS X 10.8
  * Bug 3887: tcp_outgoing_tos not working for IPv6
  * Bug 3836: Fix issues with automake 1.13+ and make check
  * Bug 3480: StoreEntry::kickProducer() segfaults in store_client::copy()
  * Fix pinning hierarchy log information
  * Fix close idle client connections associated with closed idle pinned connections.
  * Fix cbdata 'error: expression result unused' errors
  * Avoid "hot idle": A series of rapid select() calls with zero timeout.
  * Append Connection:close to OPTIONS requests when icap_persistent_connections is off
  * ntlm_fake_auth: pass DOMAIN data to Squid in original case
  * kerberos_ldap_group: fix LDAP string duplication
  * Use IPv6 localhost nameserver on DNS configuration errors
  * Add cache_miss_revalidate
  * ... and several portability improvements
- modified patches:
  * squid-compiled_without_RPM_OPT_FLAGS.patch
  * squid-config.patch
- fix build for SLE (libxml2-devel vs pkgconfig(libxml2))
- fix changed files
  * bindir/purge
  * bindir/squidclient</changelog>
<changelog author="draht@suse.de" date="1408017600">- squid-cert_tool_use_bash_not_ksh.patch:
  /usr/sbin/cert_tool should use bash, not ksh. [bnc#891313]</changelog>
<changelog author="meissner@suse.com" date="1409572800">- Changes to squid-3.3.13 (28 Aug 2014):
  - Fix segmentation fault setting up server SSL connnection
  - HTTP/1.1: Ignore Range headers with unidentifiable byte-range values
- Changes to squid-3.3.12 (09 Mar 2014):
  - Regression Bug 3769: client_netmask not evaluated since Comm redesign
  - Bug 4026: Fix SSL and adaptation_access handling of aborted connections
  - Bug 3969: Fix credentials caching for Digest authentication
  - Bug 3806: Caching responses with Vary header
  - Fix umask default on crash report generated email
  - Fix pthread library detection on FreeBSD 10
  - Avoid assertions on Range requests that trigger Squid-generated errors.
    (bnc#867533 CVE-2014-0128)</changelog>
<changelog author="jmatejek@suse.com" date="1418299200">- squid3-snmp-off-by-one.patch - fix off-by-one in snmp subsystem
  (CVE-2014-6270, bnc#895773)</changelog>
<changelog author="jkeil@suse.de" date="1445256000">- fix bsc#949942
  * squid:bsc_949942:CVE-2014-9749.patch
  * VUL-0: CVE-2014-9749: squid,squid3: Nonce replay vulnerability in Digest
    authentication</changelog>

</package>
<package pkgid="adaf93a36e239f59e03638d227976791a954734677043e9a7df4692894234df0" name="squid-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.3.13" rel="3.1"/>

<changelog author="chris@computersalat.de" date="1350820800">- update to 3.2.3 (21 Oct 2012):
  - Regression: SMP crashes on startup with workers &gt; 1
  - Bug 3655: pinning failure breaks NTLM and Negotiate authentication
  - SMP: Allow a UFS cache_dir entry to coexist with a shared memory cache entry
  - HTTP/1.1: honour Cache-Control before Pragma:no-cache
  - HTTP/1.1: Cache-Control compliance upgrade
  - Remove obsoleted refresh_pattern ignore-no-cache option
  - Fix IPv6 enabled squidclient
  - ... and several compile fixes</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix build with glibc 2.17 (add patch squid-glibc217.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="chris@computersalat.de" date="1356868800">- Changes to squid-3.2.5 (10 Dec 2012):
  - Bug 3698: Add missing include of errno.h
- Changes to squid-3.2.4 (03 Dec 2012):
  - Ported: urllogin ACL from squid 2.7
  - Bug 3688: Lots of Orphan Comm:Connections to ICAP server
  - Bug 3677: Port un-pinning logic changes from squid 3.3
  - Bug 3405: ssl_crtd crashes failing to remove certificate
  - ... and major bugs fixed in squid 3.1.22
  - Fix accept_filter on Linux
  - Remove 'Bungled' warning on missing component directives
  - ... and many buffer and memory leak issues in the bundled helpers
  - ... and a small amount of code polishing
- remove obsolete glibc-217 patch</changelog>
<changelog author="chris@computersalat.de" date="1358078400">- Changes to squid-3.2.6 (09 Jan 2013):
  fix for bnc#794954, CVE-2012-5643, SQUID:2012-1
  - Regression Bug 3731: TOS setsockopt() requires int value
  - Regression Bug 3712: Rotating logs overwrites the previous log
  - Bug 3727: LLVM compile errors in kerberos_ldap_group
  - Bug 3650: Negotiate auth missing challenge token
  - Additional fixes for CVE-2012-5643 / SQUID:2012-1
  * http://www.squid-cache.org/Advisories/SQUID-2012_1.txt
  * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643
- rebase nobuilddates, config patches</changelog>
<changelog author="e.istomin@edss.ee" date="1361361600">- Changes to squid-3.2.7 (01 Feb 2013):
  * Bug 3736: Floating point exception due to divide by zero
  * Bug 3735: raw-IPv6 domain URLs crash if IPv6-disabled
  * Bug 3732: Fix ConnOpener IPv6 awareness
  * Bug 3729: 32-bit overflow in parsing 64-bit configuration values
  * Bug 3728: Improve debug for cache_dir
  * Bug 3687: unhandled exception: c when using interception and peers
  * Bug 3678: external acl grace period causes acl lookup failures
  * Bug 3567: Memory leak handling malformed requests
  * Bug 3111: Mid-term fix for the forward.cc "err" assertion
  * Support OpenSSL NO_Compression optio
  * Fix IPv6 enabled pinger on split-stack or IPv6-disabled systems
  * Fix "address.GetPort() != 0" assertion for helpers
  * ... and several minor memory leaks
  * ... and some cache.log message polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1363348800">- New revision for squid.service (using only sed)
  handle multiple cache_dir line
  Added sed as require
- Packaging : fixed systemd squid.service
  * Rework on squid.service ExecStartPre line
    remove dependency on unfunctionnal wrapper
  * Fix bnc#802635 (creating cache struture fail on first call)
  * Fixed Type=forking and remove the use off -N (non daemon flag)
  * Fixed missing pid file
  * Structural : add all -k to end of Exec/Stop line
  * Ulimit : Added LimitNOFile=4096 ( same value as in /etc/sysconfig)
    but there's no way to decode dynamically /etc/sysconfig
  * Remove syslog.target ( no need anymore : advise from fcrozat )
  * Clean up squid_cache_build.sh
- Changes to squid-3.2.9 (12 Mar 2013):
  * Regression fix: Accept-Language header parse
  * Bug 3673: Silence 'Failed to select source' messages
  * Fix authentication headers sent on peer digest requests
  * Fix build error on Solaris, OpenIndiana, Omnios
- Changes to squid-3.2.8 (02 Mar 2013):
  * Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client
  * Bug 3763: diskd Error: no filename in shm buffer
  * Bug 3752: objects that cannot be cached in memory are not cached on disk
  * Bug 3753: Removes the domain from the cache_peer server pconn key
  * Bug 3749: IDENT lookup using wrong ports to identify the user
  * Bug 3723: tcp_outgoing_tos/mark broken for CONNECT requests
  * Bug 3686: cache_dir max-size default fails
  * Bug 3515: crash in FtpStateData::ftpTimeout
  * Bug 3329: Quieten orphan Comm::Connection messages
  * Make squid -z for cache_dir rock preserve the rock DB
  * Fixed several server connect problems
  * ... and some build issues on Solaris, OpenIndiana, MacOS X
  * ... and some documentation and debugs polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1364126400">- Fixed squid.service
- Removed commented patch lines</changelog>
<changelog author="bruno@ioda-net.ch" date="1367323200">- Changes for squid 3.2.11 release (29 April 2013)
  * Fix enter_suid/leave_suid build errors in ip/Intercept.cc
  * GNU Hurd: define MAP_NORESERVE as no-op when missing
  * Bug #3833: Option '-k' is not present in squidclient man page
  * Bug #3817: Memory leak in SSL cert validate for alt_name peer certs
  * Bug #3822: Locate LDAP and SASL headers in /usr/local/include for BSD support
  * Bug #3825: basic_ncsa_auth segfaulting with glibc-2.17
  * Bug #3774: -k reconfigure drops rock
  * Bug #3565: Resuming postponed accept kills Squid
  * HTTP/1.1: partial support for no-cache and private controls with parameters
  * ssl_crtd: helpers dying during startup on ARM
  * Updated copyright for icons/SN.png squid-3.2-11813.patch
  * Revert r11810 - tools.h does not exist in 3.2 squid-3.2-11812.patch</changelog>
<changelog author="tchvatal@suse.com" date="1374753600">- Add patch squid-fix-pod2man-check.patch solving building with
  new perl.</changelog>
<changelog author="bruno@ioda-net.ch" date="1375012800">- Changes to squid-3.2.13 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.2.12 (11 Jul 2013):
  * Protect against buffer overrun in DNS query generation
  * Avoid !closing assertions when helpers call comm_read during reconfigure.
  * Fix several minor memory leaks during reconfigure
  * Remove origin_tries limiter on forwarding and permit large max_forward_tries values</changelog>
<changelog author="chris@computersalat.de" date="1378036800">- Changes to squid-3.3.8 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.3.7 (11 Jul 2013):
  * Bug 3297: Fix openSSL related build failures
  * Fix build on FreeBSD 9.x platform with clang
  * Protect against buffer overrun in DNS query generation
- Changes to squid-3.3.6 (01 Jul 2013):
  * Bug 3854: pt1: compile errors on AIX
  * Bug 3802: Fix wrong check inside Format::Format::assemble
  * Bug 3762: remove bogus WARNING in cache.log
  * Bug 3717: assertion failed with dstdom_regex with IP based URL
  * Bug 1991: kqueue causes SSL to hang
  * Ask for SSL key password when started with -N but without sslpassword_program
  * Make sure %&lt;tt includes all [failed] connection attempts
  * Support HTTP reply ACLs in icap_log and log_icap
  * Fix incorrect external_acl_type codes
  * Fix ICAP logging request headers and segmentation faults
  * ... and some documentation polish
- Changes to squid-3.3.5 (20 May 2013):
  * Bug 3851: Delay Pool class 5 tag:levels displayed incorrectly in cache manager
  * Bug 3845: http_port tcpkeepalive= option fails parsing
  * Bug 3840: assertion failed 'sde' in UFS cache loading
  * Bug 3836: make check failures with automake-1.13
  * Bug 3827: Remove AccessLogEntry::cache.authuser
  * Bug 3816 pt2: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3780: cachemgr.cgi: output problem in HTTP Header Statistics
  * Bug 3759: OpenSSL compilation error on stock Fedora17, RHEL, CentOS 6 systems
  * Bug 3744: squid terminated: FATAL: Bungled (null) line 3: sslproxy_cert_sign
    signTrusted all
  * Port from 2.6: external acl %ACL and %DATA tags
  * Update copyright on SN.png
  * ... and several minor memory leaks
  * ... and some documentation polish
- Changes to squid-3.3.4 (27 Apr 2013):
  * Bug 3831: basic_ncsa_auth Blowfish and SHA support
  * Bug 3816: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3794: MacOS: workaround compiler errors and case-insensitivity
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3720 pt1: SourceLayout: shuffle fd_table definition into fde.h
  * Bug 3720 pt2: Add missing include in /dev/poll I/O module
  * Bug 3674: Improve compiler detection, better support warnings-as-errors on clang
  * Add support for TPROXY on BSD
  * Fix SSL Bump bypass for intercepted traffic
  * Fix memory leaks in ConnStateData pinning
  * Fix external_acl.cc "inBackground" assertion on queue overloads
  * CacheMgr: fix missing column separator in helper stats
  * OpenBSD: libpthreads requires OpenBSD 5.2 or later
  * ... and lots of documentation updates
  * ... and all changes from squid 3.2.10
- Changes to squid-3.3.3 (12 Mar 2013):
  * Bug 3720: Add missing include in /dev/poll I/O module (pt2)
  * ... and all changes from squid 3.2.9
- Changes to squid-3.3.2 (02 Mar 2013):
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3794: MacOS: workaround compiler errors
  * Bug 3720: Compile error in Solaris /OpenIndiana
  * ... and all changes from squid 3.2.8
- Changes to squid-3.3.1 (09 Feb 2013):
  * Bug 3726: build errors with --disable-ssl
  * Propigate pinned connection persistency and closures to the client.
  * Mimic SSL certificate Key Usage and Basic Constraints
  * Fix segmentation fault on missing squid.conf values
  * ext_sql_session_acl: Fix hex decoding on UID
  * ... and some code polish
  * ... and a lot of documentation polish
  * ... and all changes from squid 3.2.7
- rebase patches
  * config, nobuilddates, compiled_without_RPM_OPT_FLAGS</changelog>
<changelog author="chris@computersalat.de" date="1378123200">- fix build for 1110 (SLES_11)
  * add configure --disable-strict-error-checking</changelog>
<changelog author="chris@computersalat.de" date="1378382400">- fix build for Factory
  * rework fix-pod2man-check</changelog>
<changelog author="chris@computersalat.de" date="1380369600">- Changes to squid-3.3.9 (11 Sep 2013):
  * Regression Bug 3077: off-by-one error in Digest header decoding
  * Bug 3895: fix acl_uses_indirect_client and cache_peer_access
  * Bug 3879: assertion failed ConnStateData::validatePinnedConnection
  * Bug 3863: myportname acl causes segmentation fault
  * Bug 3849: Duplicate certificate sent when using https_port
  * Bug 2287: Better fix for unsupported HTTP version handling
  * Bug 2112: Reload into If-None-Match
  * Fix several assert with side effects in ICAP/eCAP response handling
  * Fix myportname ACL on ICAP/eCAP transactions
  * Fix external ACL user:pass detail logging after adaptation
  * Fix SMP mgr:info report 'Largest file desc currently in use'
  * Improved compatibility with gcc 4.8, clang and icc
  * Show number of available filedescriptors when reserved FD changes
  * Sync with newest OpenSSL error codes
  * Register Http2-Settings header
  * ... and many Windows portability fixes
- fix changelog</changelog>
<changelog author="chris@computersalat.de" date="1387972800">- Changes to squid-3.3.11 (01 Dec 2013):
  * Regression Bug 3936: error-details.txt parse error with OpenSSL since 3.3.9
  * Bug 3972: Segfault when getting the deny_info page ID after a reconfigure
  * Bug 3970: max_filedescriptors disabled due to missing setrlimit
  * Bug 3967: ipc/Kid.cc compilation failure: 'time' was not declared in this scope
  * Bug 3960: DEAD cache_peer are not revived
  * Bug 3956: xstrndup: tried to dup a NULL pointer
  * Bug 3906: Filedescriptor leaks in SNMP
  * Bug 3782: Digest authentication not obeying nonce_max_count
  * HTTP/1.1: Make header parser obey relaxed_header_parser
  * HTTP/1.1: Re-compute Range response content offset after an FTP response was adapted
  * SMP: Replace blocking sleep(3) and close UDS socket on failures
  * Windows: fix several compile errors
- Changes to squid-3.3.10 (03 Nov 2013):
  * Bug 3929: request_header_add not working for tunnel requests
  * Bug 3923: cbdata and undefined behavior due to dynamic runtime enumeration
  * Bug 3918: Self Test Failures on Mac OS X 10.8
  * Bug 3887: tcp_outgoing_tos not working for IPv6
  * Bug 3836: Fix issues with automake 1.13+ and make check
  * Bug 3480: StoreEntry::kickProducer() segfaults in store_client::copy()
  * Fix pinning hierarchy log information
  * Fix close idle client connections associated with closed idle pinned connections.
  * Fix cbdata 'error: expression result unused' errors
  * Avoid "hot idle": A series of rapid select() calls with zero timeout.
  * Append Connection:close to OPTIONS requests when icap_persistent_connections is off
  * ntlm_fake_auth: pass DOMAIN data to Squid in original case
  * kerberos_ldap_group: fix LDAP string duplication
  * Use IPv6 localhost nameserver on DNS configuration errors
  * Add cache_miss_revalidate
  * ... and several portability improvements
- modified patches:
  * squid-compiled_without_RPM_OPT_FLAGS.patch
  * squid-config.patch
- fix build for SLE (libxml2-devel vs pkgconfig(libxml2))
- fix changed files
  * bindir/purge
  * bindir/squidclient</changelog>
<changelog author="draht@suse.de" date="1408017600">- squid-cert_tool_use_bash_not_ksh.patch:
  /usr/sbin/cert_tool should use bash, not ksh. [bnc#891313]</changelog>
<changelog author="meissner@suse.com" date="1409572800">- Changes to squid-3.3.13 (28 Aug 2014):
  - Fix segmentation fault setting up server SSL connnection
  - HTTP/1.1: Ignore Range headers with unidentifiable byte-range values
- Changes to squid-3.3.12 (09 Mar 2014):
  - Regression Bug 3769: client_netmask not evaluated since Comm redesign
  - Bug 4026: Fix SSL and adaptation_access handling of aborted connections
  - Bug 3969: Fix credentials caching for Digest authentication
  - Bug 3806: Caching responses with Vary header
  - Fix umask default on crash report generated email
  - Fix pthread library detection on FreeBSD 10
  - Avoid assertions on Range requests that trigger Squid-generated errors.
    (bnc#867533 CVE-2014-0128)</changelog>
<changelog author="jmatejek@suse.com" date="1418299200">- squid3-snmp-off-by-one.patch - fix off-by-one in snmp subsystem
  (CVE-2014-6270, bnc#895773)</changelog>
<changelog author="jkeil@suse.de" date="1445256000">- fix bsc#949942
  * squid:bsc_949942:CVE-2014-9749.patch
  * VUL-0: CVE-2014-9749: squid,squid3: Nonce replay vulnerability in Digest
    authentication</changelog>

</package>
<package pkgid="b583a11943d557fd5c1cbad0ee96029e29bb7ddbbc713e27f6cae3b218e30b6f" name="squid-debugsource" arch="x86_64">
    <version epoch="0" ver="3.3.13" rel="3.1"/>

<changelog author="chris@computersalat.de" date="1350820800">- update to 3.2.3 (21 Oct 2012):
  - Regression: SMP crashes on startup with workers &gt; 1
  - Bug 3655: pinning failure breaks NTLM and Negotiate authentication
  - SMP: Allow a UFS cache_dir entry to coexist with a shared memory cache entry
  - HTTP/1.1: honour Cache-Control before Pragma:no-cache
  - HTTP/1.1: Cache-Control compliance upgrade
  - Remove obsoleted refresh_pattern ignore-no-cache option
  - Fix IPv6 enabled squidclient
  - ... and several compile fixes</changelog>
<changelog author="aj@suse.de" date="1353153600">- Fix build with glibc 2.17 (add patch squid-glibc217.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1354190400">- Verify GPG signature.</changelog>
<changelog author="chris@computersalat.de" date="1356868800">- Changes to squid-3.2.5 (10 Dec 2012):
  - Bug 3698: Add missing include of errno.h
- Changes to squid-3.2.4 (03 Dec 2012):
  - Ported: urllogin ACL from squid 2.7
  - Bug 3688: Lots of Orphan Comm:Connections to ICAP server
  - Bug 3677: Port un-pinning logic changes from squid 3.3
  - Bug 3405: ssl_crtd crashes failing to remove certificate
  - ... and major bugs fixed in squid 3.1.22
  - Fix accept_filter on Linux
  - Remove 'Bungled' warning on missing component directives
  - ... and many buffer and memory leak issues in the bundled helpers
  - ... and a small amount of code polishing
- remove obsolete glibc-217 patch</changelog>
<changelog author="chris@computersalat.de" date="1358078400">- Changes to squid-3.2.6 (09 Jan 2013):
  fix for bnc#794954, CVE-2012-5643, SQUID:2012-1
  - Regression Bug 3731: TOS setsockopt() requires int value
  - Regression Bug 3712: Rotating logs overwrites the previous log
  - Bug 3727: LLVM compile errors in kerberos_ldap_group
  - Bug 3650: Negotiate auth missing challenge token
  - Additional fixes for CVE-2012-5643 / SQUID:2012-1
  * http://www.squid-cache.org/Advisories/SQUID-2012_1.txt
  * http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643
- rebase nobuilddates, config patches</changelog>
<changelog author="e.istomin@edss.ee" date="1361361600">- Changes to squid-3.2.7 (01 Feb 2013):
  * Bug 3736: Floating point exception due to divide by zero
  * Bug 3735: raw-IPv6 domain URLs crash if IPv6-disabled
  * Bug 3732: Fix ConnOpener IPv6 awareness
  * Bug 3729: 32-bit overflow in parsing 64-bit configuration values
  * Bug 3728: Improve debug for cache_dir
  * Bug 3687: unhandled exception: c when using interception and peers
  * Bug 3678: external acl grace period causes acl lookup failures
  * Bug 3567: Memory leak handling malformed requests
  * Bug 3111: Mid-term fix for the forward.cc "err" assertion
  * Support OpenSSL NO_Compression optio
  * Fix IPv6 enabled pinger on split-stack or IPv6-disabled systems
  * Fix "address.GetPort() != 0" assertion for helpers
  * ... and several minor memory leaks
  * ... and some cache.log message polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1363348800">- New revision for squid.service (using only sed)
  handle multiple cache_dir line
  Added sed as require
- Packaging : fixed systemd squid.service
  * Rework on squid.service ExecStartPre line
    remove dependency on unfunctionnal wrapper
  * Fix bnc#802635 (creating cache struture fail on first call)
  * Fixed Type=forking and remove the use off -N (non daemon flag)
  * Fixed missing pid file
  * Structural : add all -k to end of Exec/Stop line
  * Ulimit : Added LimitNOFile=4096 ( same value as in /etc/sysconfig)
    but there's no way to decode dynamically /etc/sysconfig
  * Remove syslog.target ( no need anymore : advise from fcrozat )
  * Clean up squid_cache_build.sh
- Changes to squid-3.2.9 (12 Mar 2013):
  * Regression fix: Accept-Language header parse
  * Bug 3673: Silence 'Failed to select source' messages
  * Fix authentication headers sent on peer digest requests
  * Fix build error on Solaris, OpenIndiana, Omnios
- Changes to squid-3.2.8 (02 Mar 2013):
  * Bug 3767: tcp_outgoing_tos/mark ACLs do not obey acl_uses_indirect_client
  * Bug 3763: diskd Error: no filename in shm buffer
  * Bug 3752: objects that cannot be cached in memory are not cached on disk
  * Bug 3753: Removes the domain from the cache_peer server pconn key
  * Bug 3749: IDENT lookup using wrong ports to identify the user
  * Bug 3723: tcp_outgoing_tos/mark broken for CONNECT requests
  * Bug 3686: cache_dir max-size default fails
  * Bug 3515: crash in FtpStateData::ftpTimeout
  * Bug 3329: Quieten orphan Comm::Connection messages
  * Make squid -z for cache_dir rock preserve the rock DB
  * Fixed several server connect problems
  * ... and some build issues on Solaris, OpenIndiana, MacOS X
  * ... and some documentation and debugs polishing</changelog>
<changelog author="bruno@ioda-net.ch" date="1364126400">- Fixed squid.service
- Removed commented patch lines</changelog>
<changelog author="bruno@ioda-net.ch" date="1367323200">- Changes for squid 3.2.11 release (29 April 2013)
  * Fix enter_suid/leave_suid build errors in ip/Intercept.cc
  * GNU Hurd: define MAP_NORESERVE as no-op when missing
  * Bug #3833: Option '-k' is not present in squidclient man page
  * Bug #3817: Memory leak in SSL cert validate for alt_name peer certs
  * Bug #3822: Locate LDAP and SASL headers in /usr/local/include for BSD support
  * Bug #3825: basic_ncsa_auth segfaulting with glibc-2.17
  * Bug #3774: -k reconfigure drops rock
  * Bug #3565: Resuming postponed accept kills Squid
  * HTTP/1.1: partial support for no-cache and private controls with parameters
  * ssl_crtd: helpers dying during startup on ARM
  * Updated copyright for icons/SN.png squid-3.2-11813.patch
  * Revert r11810 - tools.h does not exist in 3.2 squid-3.2-11812.patch</changelog>
<changelog author="tchvatal@suse.com" date="1374753600">- Add patch squid-fix-pod2man-check.patch solving building with
  new perl.</changelog>
<changelog author="bruno@ioda-net.ch" date="1375012800">- Changes to squid-3.2.13 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.2.12 (11 Jul 2013):
  * Protect against buffer overrun in DNS query generation
  * Avoid !closing assertions when helpers call comm_read during reconfigure.
  * Fix several minor memory leaks during reconfigure
  * Remove origin_tries limiter on forwarding and permit large max_forward_tries values</changelog>
<changelog author="chris@computersalat.de" date="1378036800">- Changes to squid-3.3.8 (13 Jul 2013):
  * Bug 3869: assertion failed: MemBuf.cc:272: size &lt; capacity
  * Improved handling of port values in Host: header validation
- Changes to squid-3.3.7 (11 Jul 2013):
  * Bug 3297: Fix openSSL related build failures
  * Fix build on FreeBSD 9.x platform with clang
  * Protect against buffer overrun in DNS query generation
- Changes to squid-3.3.6 (01 Jul 2013):
  * Bug 3854: pt1: compile errors on AIX
  * Bug 3802: Fix wrong check inside Format::Format::assemble
  * Bug 3762: remove bogus WARNING in cache.log
  * Bug 3717: assertion failed with dstdom_regex with IP based URL
  * Bug 1991: kqueue causes SSL to hang
  * Ask for SSL key password when started with -N but without sslpassword_program
  * Make sure %&lt;tt includes all [failed] connection attempts
  * Support HTTP reply ACLs in icap_log and log_icap
  * Fix incorrect external_acl_type codes
  * Fix ICAP logging request headers and segmentation faults
  * ... and some documentation polish
- Changes to squid-3.3.5 (20 May 2013):
  * Bug 3851: Delay Pool class 5 tag:levels displayed incorrectly in cache manager
  * Bug 3845: http_port tcpkeepalive= option fails parsing
  * Bug 3840: assertion failed 'sde' in UFS cache loading
  * Bug 3836: make check failures with automake-1.13
  * Bug 3827: Remove AccessLogEntry::cache.authuser
  * Bug 3816 pt2: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3780: cachemgr.cgi: output problem in HTTP Header Statistics
  * Bug 3759: OpenSSL compilation error on stock Fedora17, RHEL, CentOS 6 systems
  * Bug 3744: squid terminated: FATAL: Bungled (null) line 3: sslproxy_cert_sign
    signTrusted all
  * Port from 2.6: external acl %ACL and %DATA tags
  * Update copyright on SN.png
  * ... and several minor memory leaks
  * ... and some documentation polish
- Changes to squid-3.3.4 (27 Apr 2013):
  * Bug 3831: basic_ncsa_auth Blowfish and SHA support
  * Bug 3816: SSL_get_certificate call inside Ssl::verifySslCertificate crashes
  * Bug 3794: MacOS: workaround compiler errors and case-insensitivity
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3720 pt1: SourceLayout: shuffle fd_table definition into fde.h
  * Bug 3720 pt2: Add missing include in /dev/poll I/O module
  * Bug 3674: Improve compiler detection, better support warnings-as-errors on clang
  * Add support for TPROXY on BSD
  * Fix SSL Bump bypass for intercepted traffic
  * Fix memory leaks in ConnStateData pinning
  * Fix external_acl.cc "inBackground" assertion on queue overloads
  * CacheMgr: fix missing column separator in helper stats
  * OpenBSD: libpthreads requires OpenBSD 5.2 or later
  * ... and lots of documentation updates
  * ... and all changes from squid 3.2.10
- Changes to squid-3.3.3 (12 Mar 2013):
  * Bug 3720: Add missing include in /dev/poll I/O module (pt2)
  * ... and all changes from squid 3.2.9
- Changes to squid-3.3.2 (02 Mar 2013):
  * Bug 3781: Proxy Authentication not sent to cache_peer
  * Bug 3794: MacOS: workaround compiler errors
  * Bug 3720: Compile error in Solaris /OpenIndiana
  * ... and all changes from squid 3.2.8
- Changes to squid-3.3.1 (09 Feb 2013):
  * Bug 3726: build errors with --disable-ssl
  * Propigate pinned connection persistency and closures to the client.
  * Mimic SSL certificate Key Usage and Basic Constraints
  * Fix segmentation fault on missing squid.conf values
  * ext_sql_session_acl: Fix hex decoding on UID
  * ... and some code polish
  * ... and a lot of documentation polish
  * ... and all changes from squid 3.2.7
- rebase patches
  * config, nobuilddates, compiled_without_RPM_OPT_FLAGS</changelog>
<changelog author="chris@computersalat.de" date="1378123200">- fix build for 1110 (SLES_11)
  * add configure --disable-strict-error-checking</changelog>
<changelog author="chris@computersalat.de" date="1378382400">- fix build for Factory
  * rework fix-pod2man-check</changelog>
<changelog author="chris@computersalat.de" date="1380369600">- Changes to squid-3.3.9 (11 Sep 2013):
  * Regression Bug 3077: off-by-one error in Digest header decoding
  * Bug 3895: fix acl_uses_indirect_client and cache_peer_access
  * Bug 3879: assertion failed ConnStateData::validatePinnedConnection
  * Bug 3863: myportname acl causes segmentation fault
  * Bug 3849: Duplicate certificate sent when using https_port
  * Bug 2287: Better fix for unsupported HTTP version handling
  * Bug 2112: Reload into If-None-Match
  * Fix several assert with side effects in ICAP/eCAP response handling
  * Fix myportname ACL on ICAP/eCAP transactions
  * Fix external ACL user:pass detail logging after adaptation
  * Fix SMP mgr:info report 'Largest file desc currently in use'
  * Improved compatibility with gcc 4.8, clang and icc
  * Show number of available filedescriptors when reserved FD changes
  * Sync with newest OpenSSL error codes
  * Register Http2-Settings header
  * ... and many Windows portability fixes
- fix changelog</changelog>
<changelog author="chris@computersalat.de" date="1387972800">- Changes to squid-3.3.11 (01 Dec 2013):
  * Regression Bug 3936: error-details.txt parse error with OpenSSL since 3.3.9
  * Bug 3972: Segfault when getting the deny_info page ID after a reconfigure
  * Bug 3970: max_filedescriptors disabled due to missing setrlimit
  * Bug 3967: ipc/Kid.cc compilation failure: 'time' was not declared in this scope
  * Bug 3960: DEAD cache_peer are not revived
  * Bug 3956: xstrndup: tried to dup a NULL pointer
  * Bug 3906: Filedescriptor leaks in SNMP
  * Bug 3782: Digest authentication not obeying nonce_max_count
  * HTTP/1.1: Make header parser obey relaxed_header_parser
  * HTTP/1.1: Re-compute Range response content offset after an FTP response was adapted
  * SMP: Replace blocking sleep(3) and close UDS socket on failures
  * Windows: fix several compile errors
- Changes to squid-3.3.10 (03 Nov 2013):
  * Bug 3929: request_header_add not working for tunnel requests
  * Bug 3923: cbdata and undefined behavior due to dynamic runtime enumeration
  * Bug 3918: Self Test Failures on Mac OS X 10.8
  * Bug 3887: tcp_outgoing_tos not working for IPv6
  * Bug 3836: Fix issues with automake 1.13+ and make check
  * Bug 3480: StoreEntry::kickProducer() segfaults in store_client::copy()
  * Fix pinning hierarchy log information
  * Fix close idle client connections associated with closed idle pinned connections.
  * Fix cbdata 'error: expression result unused' errors
  * Avoid "hot idle": A series of rapid select() calls with zero timeout.
  * Append Connection:close to OPTIONS requests when icap_persistent_connections is off
  * ntlm_fake_auth: pass DOMAIN data to Squid in original case
  * kerberos_ldap_group: fix LDAP string duplication
  * Use IPv6 localhost nameserver on DNS configuration errors
  * Add cache_miss_revalidate
  * ... and several portability improvements
- modified patches:
  * squid-compiled_without_RPM_OPT_FLAGS.patch
  * squid-config.patch
- fix build for SLE (libxml2-devel vs pkgconfig(libxml2))
- fix changed files
  * bindir/purge
  * bindir/squidclient</changelog>
<changelog author="draht@suse.de" date="1408017600">- squid-cert_tool_use_bash_not_ksh.patch:
  /usr/sbin/cert_tool should use bash, not ksh. [bnc#891313]</changelog>
<changelog author="meissner@suse.com" date="1409572800">- Changes to squid-3.3.13 (28 Aug 2014):
  - Fix segmentation fault setting up server SSL connnection
  - HTTP/1.1: Ignore Range headers with unidentifiable byte-range values
- Changes to squid-3.3.12 (09 Mar 2014):
  - Regression Bug 3769: client_netmask not evaluated since Comm redesign
  - Bug 4026: Fix SSL and adaptation_access handling of aborted connections
  - Bug 3969: Fix credentials caching for Digest authentication
  - Bug 3806: Caching responses with Vary header
  - Fix umask default on crash report generated email
  - Fix pthread library detection on FreeBSD 10
  - Avoid assertions on Range requests that trigger Squid-generated errors.
    (bnc#867533 CVE-2014-0128)</changelog>
<changelog author="jmatejek@suse.com" date="1418299200">- squid3-snmp-off-by-one.patch - fix off-by-one in snmp subsystem
  (CVE-2014-6270, bnc#895773)</changelog>
<changelog author="jkeil@suse.de" date="1445256000">- fix bsc#949942
  * squid:bsc_949942:CVE-2014-9749.patch
  * VUL-0: CVE-2014-9749: squid,squid3: Nonce replay vulnerability in Digest
    authentication</changelog>

</package>
<package pkgid="eae82fb6e58b9c5be3d8840b773af06296eafea59963f783827c79bab0a6ac30" name="stm32flash" arch="src">
    <version epoch="0" ver="0.4" rel="5.1"/>

<changelog author="sbrabec@suse.cz" date="1433505600">- New package, version 0.4.
- Fix i2c headers clash (stm32flash-i2c-tools-headers-clash.patch).</changelog>
<changelog author="dvaleev@suse.com" date="1444824000">- Drop stm32flash-i2c-tools-headers-clash.patch fixed in i2c-tools</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444824001">- Restore i2c patch for released openSUSE versions (boo#952646)</changelog>

</package>
<package pkgid="7174b3e03b729e0e31fdc28aaa23ccd329edf3e4dc2ca13c4e35a757afe0229b" name="stm32flash" arch="x86_64">
    <version epoch="0" ver="0.4" rel="5.1"/>

<changelog author="sbrabec@suse.cz" date="1433505600">- New package, version 0.4.
- Fix i2c headers clash (stm32flash-i2c-tools-headers-clash.patch).</changelog>
<changelog author="dvaleev@suse.com" date="1444824000">- Drop stm32flash-i2c-tools-headers-clash.patch fixed in i2c-tools</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444824001">- Restore i2c patch for released openSUSE versions (boo#952646)</changelog>

</package>
<package pkgid="a563d656d5853c076e063d0b1914d162d406726d0f25c5fd815616685892fb34" name="stm32flash-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.4" rel="5.1"/>

<changelog author="sbrabec@suse.cz" date="1433505600">- New package, version 0.4.
- Fix i2c headers clash (stm32flash-i2c-tools-headers-clash.patch).</changelog>
<changelog author="dvaleev@suse.com" date="1444824000">- Drop stm32flash-i2c-tools-headers-clash.patch fixed in i2c-tools</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444824001">- Restore i2c patch for released openSUSE versions (boo#952646)</changelog>

</package>
<package pkgid="8e46b28de59f47250d56e40ecf222697531afe656f3922a7b88a7c1da240c287" name="stm32flash-debugsource" arch="x86_64">
    <version epoch="0" ver="0.4" rel="5.1"/>

<changelog author="sbrabec@suse.cz" date="1433505600">- New package, version 0.4.
- Fix i2c headers clash (stm32flash-i2c-tools-headers-clash.patch).</changelog>
<changelog author="dvaleev@suse.com" date="1444824000">- Drop stm32flash-i2c-tools-headers-clash.patch fixed in i2c-tools</changelog>
<changelog author="dmitry_r@opensuse.org" date="1444824001">- Restore i2c patch for released openSUSE versions (boo#952646)</changelog>

</package>
<package pkgid="65767dfdafc9f9d7e86c2a96c98a4d501eaf75d8f35013d30043e6c6b1189253" name="sudo" arch="src">
    <version epoch="0" ver="1.8.10p3" rel="5.1"/>

<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>
<changelog author="michael@stroeder.com" date="1372334400">- Update to upstream release 1.8.7
  * remove CVE-2013-1775
  * remove CVE-2013-1776
  * The non-Unix group plugin is now supported when sudoers data is stored in LDAP.
  * User messages are now always displayed in the user's locale, even when the
  same message is being logged or mailed in a different locale.
  * Log files created by sudo now explicitly have the group set to group ID 0
  rather than relying on BSD group semantics (which may not be the default).
  * A new exec_background sudoers option can be used to initially run the
  command without read access to the terminal when running a command in a
  pseudo-tty.
  * Sudo now produces better error messages when there is an error in the sudo.conf file.
  * Two new settings have been added to sudo.conf to give the admin better control of
  how group database queries are performed.
  * There is now a standalone sudo.conf manual page.
  * New support for specifying a SHA-2 digest along with the command in sudoers.
  Supported hash types are sha224, sha256, sha384 and sha512. See the description
  of Digest_Spec in the sudoers manual or the description of sudoCommand in the
  sudoers.ldap manual for details.
  * Fixed potential false positives in visudo's alias cycle detection.
  * Sudo now only builds Position Independent Executables (PIE) by default on Linux
  systems and verifies that a trivial test program builds and runs.</changelog>
<changelog author="dmueller@suse.com" date="1372766400">- restore accidentally dropped suse-specific patches</changelog>
<changelog author="darin@darins.net" date="1373371200">- Enable SSSD as a sudoers data source</changelog>
<changelog author="darin@darins.net" date="1373371201">- Added patch to resolve packaging error. Patch has been sent
  upstream.
  * E: sudo 64bit-portability-issue ./sssd.c:829</changelog>
<changelog author="vcizek@suse.com" date="1373630400">- fix the default flag settings in manual to reflect changes caused by
  sudo-sudoers.patch (bnc#823292)</changelog>
<changelog author="vcizek@suse.com" date="1381233600">- update to 1.8.8
- drop sudo-plugins-sudoers-sssd.patch (upstream)
  * Removed a warning on PAM systems with stacked auth modules
    where the first module on the stack does not succeed.
  * Sudo, sudoreplay and visudo now support GNU-style long options.
  * The -h (--host) option may now be used to specify a host name.
    This is currently only used by the sudoers plugin in conjunction
    with the -l (--list) option.
  * Sudo's LDAP SASL support now works properly with Kerberos.
    Previously, the SASL library was unable to locate the user's
    credential cache.
  * It is now possible to set the nproc resource limit to unlimited
    via pam_limits on Linux (bug #565).
  * New "pam_service" and "pam_login_service" sudoers options
    that can be used to specify the PAM service name to use.
  * New "pam_session" and "pam_setcred" sudoers options that
    can be used to disable PAM session and credential support.
  * The sudoers plugin now properly supports UIDs and GIDs
    that are larger than 0x7fffffff on 32-bit platforms.
  * Fixed a visudo bug introduced in sudo 1.8.7 where per-group
    Defaults entries would cause an internal error.
  * If the "tty_tickets" sudoers option is enabled (the default),
    but there is no tty present, sudo will now use a ticket file
    based on the parent process ID.  This makes it possible to support
    the normal timeout behavior for the session.
  * Fixed a problem running commands that change their process
    group and then attempt to change the terminal settings when not
    running the command in a pseudo-terminal.  Previously, the process
    would receive SIGTTOU since it was effectively a background
    process.  Sudo will now grant the child the controlling tty and
    continue it when this happens.
  * The "closefrom_override" sudoers option may now be used in
    a command-specified Defaults entry (bug #610).
  * Fixed visudo's -q (--quiet) flag, broken in sudo 1.8.6.
  * Root may no longer change its SELinux role without entering
    a password.
  * Fixed a bug introduced in Sudo 1.8.7 where the indexes written
    to the I/O log timing file are two greater than they should be.
    Sudoreplay now contains a work-around to parse those files.</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- update to 1.8.9p3
- set secure_path to /usr/sbin:/usr/bin:/sbin:/bin
- changes since 1.8.8:
  * Fixed a bug introduced in sudo 1.8.9 that prevented the tty name
    from being resolved properly on Linux systems.  Bug #630.
  * Updated config.guess, config.sub and libtool to support the ppc64le
    architecture (IBM PowerPC Little Endian).
  * Fixed a problem with gcc 4.8's handling of bit fields that could
    lead to the noexec flag being enabled even when it was not
    explicitly set.
  * Reworked sudo's main event loop to use a simple event subsystem
    using poll(2) or select(2) as the back end.
  * It is now possible to statically compile the sudoers plugin into
    the sudo binary without disabling shared library support.  The
    sudo.conf file may still be used to configure other plugins.
  * Sudo can now be compiled again with a C preprocessor that does
    not support variadic macros.
  * Visudo can now export a sudoers file in JSON format using the
    new -x flag.
  * The locale is now set correctly again for visudo and sudoreplay.
  * The plugin API has been extended to allow the plugin to exclude
    specific file descriptors from the "closefrom" range.
  * There is now a workaround for a Solaris-specific problem where
    NOEXEC was overriding traditional root DAC behavior.
  * Add user netgroup filtering for SSSD. Previously, rules for
    a netgroup were applied to all even when they did not belong
    to the specified netgroup.
  * On systems with BSD login classes, if the user specified a group
    (not a user) to run the command as, it was possible to specify
    a different login class even when the command was not run as the
    super user.
  * The closefrom() emulation on Mac OS X now uses /dev/fd if possible.
  * Fixed a bug where sudoedit would not update the original file
    from the temporary when PAM or I/O logging is not enabled.
  * When recycling I/O logs, the log files are now truncated properly.
  * Fixes bugs #617, #621, #622, #623, #624, #625, #626</changelog>
<changelog author="vcizek@suse.com" date="1390392000">- added subpackage with a test for fate#313276</changelog>
<changelog author="vcizek@suse.com" date="1390996800">- update to 1.8.9p4
  * Fixed a bug where sudo could consume large amounts of CPU while
    the command was running when I/O logging is not enabled.
    Bug #631 (bnc#861153)
  * Fixed a bug where sudo would exit with an error when the debug
    level is set to util@debug or all@debug and I/O logging is not
    enabled. The command would continue runnning after sudo exited.</changelog>
<changelog author="vcizek@suse.com" date="1400155200">- update to 1.8.10p3
  * Fixed expansion of the %p escape in the prompt for "sudo -l"
    when rootpw, runaspw or targetpw is set. Bug #639.
  * Fixed matching of uids and gids which was broken in version 1.8.9
  * PAM credential initialization has been re-enabled. It was
    unintentionally disabled by default in version 1.8.8. The way
    credentials are initialized has also been fixed. Bug #642.
  * Fixed a descriptor leak on Linux when determing boot time. Sudo
    normally closes extra descriptors before running a command so
    the impact is limited. Bug #645.
  * Fixed flushing of the last buffer of data when I/O logging is
    enabled. This bug, introduced in version 1.8.9, could cause
    incomplete command output on some systems. Bug #646.
  * Fixed a hang introduced in sudo 1.8.10 when timestamp_timeout
    is set to zero. Bug #638.
  * It is now possible to disable network interface probing in sudo.conf
  * When listing a user's privileges (sudo -l), the sudoers plugin
    will now prompt for the user's password even if the targetpw,
    rootpw or runaspw options are set.
  * The sudoers plugin uses a new format for its time stamp files.
  * sudo's -K option will now remove all of the user's time stamps,
    not just the time stamp for the current terminal.
  * LDAP-based sudoers now uses a default search filter of
    (objectClass=sudoRole) for more efficient queries.
  * The new use_netgroups sudoers option can be used to explicitly
    enable or disable netgroups support.
  * Sudo is once again able to open the sudoers file when the
    group on sudoers doesn't match the expected value
  * The JSON format used by visudo -x now properly supports
    the negation operator.
  * Fixed a compilation error on AIX when LDAP support is enabled.
  * Fixed parsing of the "umask" defaults setting in sudoers.
  * Fixed a failed assertion when the "closefrom_override" defaults
    setting is enabled in sudoers and sudo's -C flag is used.
- option --with-timedir was renamed to --with-rundir
- don't install test LICENSE with executable perms</changelog>
<changelog author="kstreitova@suse.com" date="1445428800">- add sudo-1.8.10p3-CVE-2014-9680.patch to fix unsafe handling of
  TZ environment variable [CVE-2014-9680], [bnc#917806].</changelog>

</package>
<package pkgid="dc616e78d545dd7fa87150cfeafdc9d51ea19d2a4665c0c07d10700f5a7e863c" name="sudo" arch="x86_64">
    <version epoch="0" ver="1.8.10p3" rel="5.1"/>

<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>
<changelog author="michael@stroeder.com" date="1372334400">- Update to upstream release 1.8.7
  * remove CVE-2013-1775
  * remove CVE-2013-1776
  * The non-Unix group plugin is now supported when sudoers data is stored in LDAP.
  * User messages are now always displayed in the user's locale, even when the
  same message is being logged or mailed in a different locale.
  * Log files created by sudo now explicitly have the group set to group ID 0
  rather than relying on BSD group semantics (which may not be the default).
  * A new exec_background sudoers option can be used to initially run the
  command without read access to the terminal when running a command in a
  pseudo-tty.
  * Sudo now produces better error messages when there is an error in the sudo.conf file.
  * Two new settings have been added to sudo.conf to give the admin better control of
  how group database queries are performed.
  * There is now a standalone sudo.conf manual page.
  * New support for specifying a SHA-2 digest along with the command in sudoers.
  Supported hash types are sha224, sha256, sha384 and sha512. See the description
  of Digest_Spec in the sudoers manual or the description of sudoCommand in the
  sudoers.ldap manual for details.
  * Fixed potential false positives in visudo's alias cycle detection.
  * Sudo now only builds Position Independent Executables (PIE) by default on Linux
  systems and verifies that a trivial test program builds and runs.</changelog>
<changelog author="dmueller@suse.com" date="1372766400">- restore accidentally dropped suse-specific patches</changelog>
<changelog author="darin@darins.net" date="1373371200">- Enable SSSD as a sudoers data source</changelog>
<changelog author="darin@darins.net" date="1373371201">- Added patch to resolve packaging error. Patch has been sent
  upstream.
  * E: sudo 64bit-portability-issue ./sssd.c:829</changelog>
<changelog author="vcizek@suse.com" date="1373630400">- fix the default flag settings in manual to reflect changes caused by
  sudo-sudoers.patch (bnc#823292)</changelog>
<changelog author="vcizek@suse.com" date="1381233600">- update to 1.8.8
- drop sudo-plugins-sudoers-sssd.patch (upstream)
  * Removed a warning on PAM systems with stacked auth modules
    where the first module on the stack does not succeed.
  * Sudo, sudoreplay and visudo now support GNU-style long options.
  * The -h (--host) option may now be used to specify a host name.
    This is currently only used by the sudoers plugin in conjunction
    with the -l (--list) option.
  * Sudo's LDAP SASL support now works properly with Kerberos.
    Previously, the SASL library was unable to locate the user's
    credential cache.
  * It is now possible to set the nproc resource limit to unlimited
    via pam_limits on Linux (bug #565).
  * New "pam_service" and "pam_login_service" sudoers options
    that can be used to specify the PAM service name to use.
  * New "pam_session" and "pam_setcred" sudoers options that
    can be used to disable PAM session and credential support.
  * The sudoers plugin now properly supports UIDs and GIDs
    that are larger than 0x7fffffff on 32-bit platforms.
  * Fixed a visudo bug introduced in sudo 1.8.7 where per-group
    Defaults entries would cause an internal error.
  * If the "tty_tickets" sudoers option is enabled (the default),
    but there is no tty present, sudo will now use a ticket file
    based on the parent process ID.  This makes it possible to support
    the normal timeout behavior for the session.
  * Fixed a problem running commands that change their process
    group and then attempt to change the terminal settings when not
    running the command in a pseudo-terminal.  Previously, the process
    would receive SIGTTOU since it was effectively a background
    process.  Sudo will now grant the child the controlling tty and
    continue it when this happens.
  * The "closefrom_override" sudoers option may now be used in
    a command-specified Defaults entry (bug #610).
  * Fixed visudo's -q (--quiet) flag, broken in sudo 1.8.6.
  * Root may no longer change its SELinux role without entering
    a password.
  * Fixed a bug introduced in Sudo 1.8.7 where the indexes written
    to the I/O log timing file are two greater than they should be.
    Sudoreplay now contains a work-around to parse those files.</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- update to 1.8.9p3
- set secure_path to /usr/sbin:/usr/bin:/sbin:/bin
- changes since 1.8.8:
  * Fixed a bug introduced in sudo 1.8.9 that prevented the tty name
    from being resolved properly on Linux systems.  Bug #630.
  * Updated config.guess, config.sub and libtool to support the ppc64le
    architecture (IBM PowerPC Little Endian).
  * Fixed a problem with gcc 4.8's handling of bit fields that could
    lead to the noexec flag being enabled even when it was not
    explicitly set.
  * Reworked sudo's main event loop to use a simple event subsystem
    using poll(2) or select(2) as the back end.
  * It is now possible to statically compile the sudoers plugin into
    the sudo binary without disabling shared library support.  The
    sudo.conf file may still be used to configure other plugins.
  * Sudo can now be compiled again with a C preprocessor that does
    not support variadic macros.
  * Visudo can now export a sudoers file in JSON format using the
    new -x flag.
  * The locale is now set correctly again for visudo and sudoreplay.
  * The plugin API has been extended to allow the plugin to exclude
    specific file descriptors from the "closefrom" range.
  * There is now a workaround for a Solaris-specific problem where
    NOEXEC was overriding traditional root DAC behavior.
  * Add user netgroup filtering for SSSD. Previously, rules for
    a netgroup were applied to all even when they did not belong
    to the specified netgroup.
  * On systems with BSD login classes, if the user specified a group
    (not a user) to run the command as, it was possible to specify
    a different login class even when the command was not run as the
    super user.
  * The closefrom() emulation on Mac OS X now uses /dev/fd if possible.
  * Fixed a bug where sudoedit would not update the original file
    from the temporary when PAM or I/O logging is not enabled.
  * When recycling I/O logs, the log files are now truncated properly.
  * Fixes bugs #617, #621, #622, #623, #624, #625, #626</changelog>
<changelog author="vcizek@suse.com" date="1390392000">- added subpackage with a test for fate#313276</changelog>
<changelog author="vcizek@suse.com" date="1390996800">- update to 1.8.9p4
  * Fixed a bug where sudo could consume large amounts of CPU while
    the command was running when I/O logging is not enabled.
    Bug #631 (bnc#861153)
  * Fixed a bug where sudo would exit with an error when the debug
    level is set to util@debug or all@debug and I/O logging is not
    enabled. The command would continue runnning after sudo exited.</changelog>
<changelog author="vcizek@suse.com" date="1400155200">- update to 1.8.10p3
  * Fixed expansion of the %p escape in the prompt for "sudo -l"
    when rootpw, runaspw or targetpw is set. Bug #639.
  * Fixed matching of uids and gids which was broken in version 1.8.9
  * PAM credential initialization has been re-enabled. It was
    unintentionally disabled by default in version 1.8.8. The way
    credentials are initialized has also been fixed. Bug #642.
  * Fixed a descriptor leak on Linux when determing boot time. Sudo
    normally closes extra descriptors before running a command so
    the impact is limited. Bug #645.
  * Fixed flushing of the last buffer of data when I/O logging is
    enabled. This bug, introduced in version 1.8.9, could cause
    incomplete command output on some systems. Bug #646.
  * Fixed a hang introduced in sudo 1.8.10 when timestamp_timeout
    is set to zero. Bug #638.
  * It is now possible to disable network interface probing in sudo.conf
  * When listing a user's privileges (sudo -l), the sudoers plugin
    will now prompt for the user's password even if the targetpw,
    rootpw or runaspw options are set.
  * The sudoers plugin uses a new format for its time stamp files.
  * sudo's -K option will now remove all of the user's time stamps,
    not just the time stamp for the current terminal.
  * LDAP-based sudoers now uses a default search filter of
    (objectClass=sudoRole) for more efficient queries.
  * The new use_netgroups sudoers option can be used to explicitly
    enable or disable netgroups support.
  * Sudo is once again able to open the sudoers file when the
    group on sudoers doesn't match the expected value
  * The JSON format used by visudo -x now properly supports
    the negation operator.
  * Fixed a compilation error on AIX when LDAP support is enabled.
  * Fixed parsing of the "umask" defaults setting in sudoers.
  * Fixed a failed assertion when the "closefrom_override" defaults
    setting is enabled in sudoers and sudo's -C flag is used.
- option --with-timedir was renamed to --with-rundir
- don't install test LICENSE with executable perms</changelog>
<changelog author="kstreitova@suse.com" date="1445428800">- add sudo-1.8.10p3-CVE-2014-9680.patch to fix unsafe handling of
  TZ environment variable [CVE-2014-9680], [bnc#917806].</changelog>

</package>
<package pkgid="c1b033517f968bb22668e15aec377f85dfa9b2ff31ee80905572c932f4f88ab8" name="sudo-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.8.10p3" rel="5.1"/>

<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>
<changelog author="michael@stroeder.com" date="1372334400">- Update to upstream release 1.8.7
  * remove CVE-2013-1775
  * remove CVE-2013-1776
  * The non-Unix group plugin is now supported when sudoers data is stored in LDAP.
  * User messages are now always displayed in the user's locale, even when the
  same message is being logged or mailed in a different locale.
  * Log files created by sudo now explicitly have the group set to group ID 0
  rather than relying on BSD group semantics (which may not be the default).
  * A new exec_background sudoers option can be used to initially run the
  command without read access to the terminal when running a command in a
  pseudo-tty.
  * Sudo now produces better error messages when there is an error in the sudo.conf file.
  * Two new settings have been added to sudo.conf to give the admin better control of
  how group database queries are performed.
  * There is now a standalone sudo.conf manual page.
  * New support for specifying a SHA-2 digest along with the command in sudoers.
  Supported hash types are sha224, sha256, sha384 and sha512. See the description
  of Digest_Spec in the sudoers manual or the description of sudoCommand in the
  sudoers.ldap manual for details.
  * Fixed potential false positives in visudo's alias cycle detection.
  * Sudo now only builds Position Independent Executables (PIE) by default on Linux
  systems and verifies that a trivial test program builds and runs.</changelog>
<changelog author="dmueller@suse.com" date="1372766400">- restore accidentally dropped suse-specific patches</changelog>
<changelog author="darin@darins.net" date="1373371200">- Enable SSSD as a sudoers data source</changelog>
<changelog author="darin@darins.net" date="1373371201">- Added patch to resolve packaging error. Patch has been sent
  upstream.
  * E: sudo 64bit-portability-issue ./sssd.c:829</changelog>
<changelog author="vcizek@suse.com" date="1373630400">- fix the default flag settings in manual to reflect changes caused by
  sudo-sudoers.patch (bnc#823292)</changelog>
<changelog author="vcizek@suse.com" date="1381233600">- update to 1.8.8
- drop sudo-plugins-sudoers-sssd.patch (upstream)
  * Removed a warning on PAM systems with stacked auth modules
    where the first module on the stack does not succeed.
  * Sudo, sudoreplay and visudo now support GNU-style long options.
  * The -h (--host) option may now be used to specify a host name.
    This is currently only used by the sudoers plugin in conjunction
    with the -l (--list) option.
  * Sudo's LDAP SASL support now works properly with Kerberos.
    Previously, the SASL library was unable to locate the user's
    credential cache.
  * It is now possible to set the nproc resource limit to unlimited
    via pam_limits on Linux (bug #565).
  * New "pam_service" and "pam_login_service" sudoers options
    that can be used to specify the PAM service name to use.
  * New "pam_session" and "pam_setcred" sudoers options that
    can be used to disable PAM session and credential support.
  * The sudoers plugin now properly supports UIDs and GIDs
    that are larger than 0x7fffffff on 32-bit platforms.
  * Fixed a visudo bug introduced in sudo 1.8.7 where per-group
    Defaults entries would cause an internal error.
  * If the "tty_tickets" sudoers option is enabled (the default),
    but there is no tty present, sudo will now use a ticket file
    based on the parent process ID.  This makes it possible to support
    the normal timeout behavior for the session.
  * Fixed a problem running commands that change their process
    group and then attempt to change the terminal settings when not
    running the command in a pseudo-terminal.  Previously, the process
    would receive SIGTTOU since it was effectively a background
    process.  Sudo will now grant the child the controlling tty and
    continue it when this happens.
  * The "closefrom_override" sudoers option may now be used in
    a command-specified Defaults entry (bug #610).
  * Fixed visudo's -q (--quiet) flag, broken in sudo 1.8.6.
  * Root may no longer change its SELinux role without entering
    a password.
  * Fixed a bug introduced in Sudo 1.8.7 where the indexes written
    to the I/O log timing file are two greater than they should be.
    Sudoreplay now contains a work-around to parse those files.</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- update to 1.8.9p3
- set secure_path to /usr/sbin:/usr/bin:/sbin:/bin
- changes since 1.8.8:
  * Fixed a bug introduced in sudo 1.8.9 that prevented the tty name
    from being resolved properly on Linux systems.  Bug #630.
  * Updated config.guess, config.sub and libtool to support the ppc64le
    architecture (IBM PowerPC Little Endian).
  * Fixed a problem with gcc 4.8's handling of bit fields that could
    lead to the noexec flag being enabled even when it was not
    explicitly set.
  * Reworked sudo's main event loop to use a simple event subsystem
    using poll(2) or select(2) as the back end.
  * It is now possible to statically compile the sudoers plugin into
    the sudo binary without disabling shared library support.  The
    sudo.conf file may still be used to configure other plugins.
  * Sudo can now be compiled again with a C preprocessor that does
    not support variadic macros.
  * Visudo can now export a sudoers file in JSON format using the
    new -x flag.
  * The locale is now set correctly again for visudo and sudoreplay.
  * The plugin API has been extended to allow the plugin to exclude
    specific file descriptors from the "closefrom" range.
  * There is now a workaround for a Solaris-specific problem where
    NOEXEC was overriding traditional root DAC behavior.
  * Add user netgroup filtering for SSSD. Previously, rules for
    a netgroup were applied to all even when they did not belong
    to the specified netgroup.
  * On systems with BSD login classes, if the user specified a group
    (not a user) to run the command as, it was possible to specify
    a different login class even when the command was not run as the
    super user.
  * The closefrom() emulation on Mac OS X now uses /dev/fd if possible.
  * Fixed a bug where sudoedit would not update the original file
    from the temporary when PAM or I/O logging is not enabled.
  * When recycling I/O logs, the log files are now truncated properly.
  * Fixes bugs #617, #621, #622, #623, #624, #625, #626</changelog>
<changelog author="vcizek@suse.com" date="1390392000">- added subpackage with a test for fate#313276</changelog>
<changelog author="vcizek@suse.com" date="1390996800">- update to 1.8.9p4
  * Fixed a bug where sudo could consume large amounts of CPU while
    the command was running when I/O logging is not enabled.
    Bug #631 (bnc#861153)
  * Fixed a bug where sudo would exit with an error when the debug
    level is set to util@debug or all@debug and I/O logging is not
    enabled. The command would continue runnning after sudo exited.</changelog>
<changelog author="vcizek@suse.com" date="1400155200">- update to 1.8.10p3
  * Fixed expansion of the %p escape in the prompt for "sudo -l"
    when rootpw, runaspw or targetpw is set. Bug #639.
  * Fixed matching of uids and gids which was broken in version 1.8.9
  * PAM credential initialization has been re-enabled. It was
    unintentionally disabled by default in version 1.8.8. The way
    credentials are initialized has also been fixed. Bug #642.
  * Fixed a descriptor leak on Linux when determing boot time. Sudo
    normally closes extra descriptors before running a command so
    the impact is limited. Bug #645.
  * Fixed flushing of the last buffer of data when I/O logging is
    enabled. This bug, introduced in version 1.8.9, could cause
    incomplete command output on some systems. Bug #646.
  * Fixed a hang introduced in sudo 1.8.10 when timestamp_timeout
    is set to zero. Bug #638.
  * It is now possible to disable network interface probing in sudo.conf
  * When listing a user's privileges (sudo -l), the sudoers plugin
    will now prompt for the user's password even if the targetpw,
    rootpw or runaspw options are set.
  * The sudoers plugin uses a new format for its time stamp files.
  * sudo's -K option will now remove all of the user's time stamps,
    not just the time stamp for the current terminal.
  * LDAP-based sudoers now uses a default search filter of
    (objectClass=sudoRole) for more efficient queries.
  * The new use_netgroups sudoers option can be used to explicitly
    enable or disable netgroups support.
  * Sudo is once again able to open the sudoers file when the
    group on sudoers doesn't match the expected value
  * The JSON format used by visudo -x now properly supports
    the negation operator.
  * Fixed a compilation error on AIX when LDAP support is enabled.
  * Fixed parsing of the "umask" defaults setting in sudoers.
  * Fixed a failed assertion when the "closefrom_override" defaults
    setting is enabled in sudoers and sudo's -C flag is used.
- option --with-timedir was renamed to --with-rundir
- don't install test LICENSE with executable perms</changelog>
<changelog author="kstreitova@suse.com" date="1445428800">- add sudo-1.8.10p3-CVE-2014-9680.patch to fix unsafe handling of
  TZ environment variable [CVE-2014-9680], [bnc#917806].</changelog>

</package>
<package pkgid="ffd28939d81f498ee7d496e8111557dec61950aa09ac85684cc938e8c0d2c94a" name="sudo-debugsource" arch="x86_64">
    <version epoch="0" ver="1.8.10p3" rel="5.1"/>

<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>
<changelog author="michael@stroeder.com" date="1372334400">- Update to upstream release 1.8.7
  * remove CVE-2013-1775
  * remove CVE-2013-1776
  * The non-Unix group plugin is now supported when sudoers data is stored in LDAP.
  * User messages are now always displayed in the user's locale, even when the
  same message is being logged or mailed in a different locale.
  * Log files created by sudo now explicitly have the group set to group ID 0
  rather than relying on BSD group semantics (which may not be the default).
  * A new exec_background sudoers option can be used to initially run the
  command without read access to the terminal when running a command in a
  pseudo-tty.
  * Sudo now produces better error messages when there is an error in the sudo.conf file.
  * Two new settings have been added to sudo.conf to give the admin better control of
  how group database queries are performed.
  * There is now a standalone sudo.conf manual page.
  * New support for specifying a SHA-2 digest along with the command in sudoers.
  Supported hash types are sha224, sha256, sha384 and sha512. See the description
  of Digest_Spec in the sudoers manual or the description of sudoCommand in the
  sudoers.ldap manual for details.
  * Fixed potential false positives in visudo's alias cycle detection.
  * Sudo now only builds Position Independent Executables (PIE) by default on Linux
  systems and verifies that a trivial test program builds and runs.</changelog>
<changelog author="dmueller@suse.com" date="1372766400">- restore accidentally dropped suse-specific patches</changelog>
<changelog author="darin@darins.net" date="1373371200">- Enable SSSD as a sudoers data source</changelog>
<changelog author="darin@darins.net" date="1373371201">- Added patch to resolve packaging error. Patch has been sent
  upstream.
  * E: sudo 64bit-portability-issue ./sssd.c:829</changelog>
<changelog author="vcizek@suse.com" date="1373630400">- fix the default flag settings in manual to reflect changes caused by
  sudo-sudoers.patch (bnc#823292)</changelog>
<changelog author="vcizek@suse.com" date="1381233600">- update to 1.8.8
- drop sudo-plugins-sudoers-sssd.patch (upstream)
  * Removed a warning on PAM systems with stacked auth modules
    where the first module on the stack does not succeed.
  * Sudo, sudoreplay and visudo now support GNU-style long options.
  * The -h (--host) option may now be used to specify a host name.
    This is currently only used by the sudoers plugin in conjunction
    with the -l (--list) option.
  * Sudo's LDAP SASL support now works properly with Kerberos.
    Previously, the SASL library was unable to locate the user's
    credential cache.
  * It is now possible to set the nproc resource limit to unlimited
    via pam_limits on Linux (bug #565).
  * New "pam_service" and "pam_login_service" sudoers options
    that can be used to specify the PAM service name to use.
  * New "pam_session" and "pam_setcred" sudoers options that
    can be used to disable PAM session and credential support.
  * The sudoers plugin now properly supports UIDs and GIDs
    that are larger than 0x7fffffff on 32-bit platforms.
  * Fixed a visudo bug introduced in sudo 1.8.7 where per-group
    Defaults entries would cause an internal error.
  * If the "tty_tickets" sudoers option is enabled (the default),
    but there is no tty present, sudo will now use a ticket file
    based on the parent process ID.  This makes it possible to support
    the normal timeout behavior for the session.
  * Fixed a problem running commands that change their process
    group and then attempt to change the terminal settings when not
    running the command in a pseudo-terminal.  Previously, the process
    would receive SIGTTOU since it was effectively a background
    process.  Sudo will now grant the child the controlling tty and
    continue it when this happens.
  * The "closefrom_override" sudoers option may now be used in
    a command-specified Defaults entry (bug #610).
  * Fixed visudo's -q (--quiet) flag, broken in sudo 1.8.6.
  * Root may no longer change its SELinux role without entering
    a password.
  * Fixed a bug introduced in Sudo 1.8.7 where the indexes written
    to the I/O log timing file are two greater than they should be.
    Sudoreplay now contains a work-around to parse those files.</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- update to 1.8.9p3
- set secure_path to /usr/sbin:/usr/bin:/sbin:/bin
- changes since 1.8.8:
  * Fixed a bug introduced in sudo 1.8.9 that prevented the tty name
    from being resolved properly on Linux systems.  Bug #630.
  * Updated config.guess, config.sub and libtool to support the ppc64le
    architecture (IBM PowerPC Little Endian).
  * Fixed a problem with gcc 4.8's handling of bit fields that could
    lead to the noexec flag being enabled even when it was not
    explicitly set.
  * Reworked sudo's main event loop to use a simple event subsystem
    using poll(2) or select(2) as the back end.
  * It is now possible to statically compile the sudoers plugin into
    the sudo binary without disabling shared library support.  The
    sudo.conf file may still be used to configure other plugins.
  * Sudo can now be compiled again with a C preprocessor that does
    not support variadic macros.
  * Visudo can now export a sudoers file in JSON format using the
    new -x flag.
  * The locale is now set correctly again for visudo and sudoreplay.
  * The plugin API has been extended to allow the plugin to exclude
    specific file descriptors from the "closefrom" range.
  * There is now a workaround for a Solaris-specific problem where
    NOEXEC was overriding traditional root DAC behavior.
  * Add user netgroup filtering for SSSD. Previously, rules for
    a netgroup were applied to all even when they did not belong
    to the specified netgroup.
  * On systems with BSD login classes, if the user specified a group
    (not a user) to run the command as, it was possible to specify
    a different login class even when the command was not run as the
    super user.
  * The closefrom() emulation on Mac OS X now uses /dev/fd if possible.
  * Fixed a bug where sudoedit would not update the original file
    from the temporary when PAM or I/O logging is not enabled.
  * When recycling I/O logs, the log files are now truncated properly.
  * Fixes bugs #617, #621, #622, #623, #624, #625, #626</changelog>
<changelog author="vcizek@suse.com" date="1390392000">- added subpackage with a test for fate#313276</changelog>
<changelog author="vcizek@suse.com" date="1390996800">- update to 1.8.9p4
  * Fixed a bug where sudo could consume large amounts of CPU while
    the command was running when I/O logging is not enabled.
    Bug #631 (bnc#861153)
  * Fixed a bug where sudo would exit with an error when the debug
    level is set to util@debug or all@debug and I/O logging is not
    enabled. The command would continue runnning after sudo exited.</changelog>
<changelog author="vcizek@suse.com" date="1400155200">- update to 1.8.10p3
  * Fixed expansion of the %p escape in the prompt for "sudo -l"
    when rootpw, runaspw or targetpw is set. Bug #639.
  * Fixed matching of uids and gids which was broken in version 1.8.9
  * PAM credential initialization has been re-enabled. It was
    unintentionally disabled by default in version 1.8.8. The way
    credentials are initialized has also been fixed. Bug #642.
  * Fixed a descriptor leak on Linux when determing boot time. Sudo
    normally closes extra descriptors before running a command so
    the impact is limited. Bug #645.
  * Fixed flushing of the last buffer of data when I/O logging is
    enabled. This bug, introduced in version 1.8.9, could cause
    incomplete command output on some systems. Bug #646.
  * Fixed a hang introduced in sudo 1.8.10 when timestamp_timeout
    is set to zero. Bug #638.
  * It is now possible to disable network interface probing in sudo.conf
  * When listing a user's privileges (sudo -l), the sudoers plugin
    will now prompt for the user's password even if the targetpw,
    rootpw or runaspw options are set.
  * The sudoers plugin uses a new format for its time stamp files.
  * sudo's -K option will now remove all of the user's time stamps,
    not just the time stamp for the current terminal.
  * LDAP-based sudoers now uses a default search filter of
    (objectClass=sudoRole) for more efficient queries.
  * The new use_netgroups sudoers option can be used to explicitly
    enable or disable netgroups support.
  * Sudo is once again able to open the sudoers file when the
    group on sudoers doesn't match the expected value
  * The JSON format used by visudo -x now properly supports
    the negation operator.
  * Fixed a compilation error on AIX when LDAP support is enabled.
  * Fixed parsing of the "umask" defaults setting in sudoers.
  * Fixed a failed assertion when the "closefrom_override" defaults
    setting is enabled in sudoers and sudo's -C flag is used.
- option --with-timedir was renamed to --with-rundir
- don't install test LICENSE with executable perms</changelog>
<changelog author="kstreitova@suse.com" date="1445428800">- add sudo-1.8.10p3-CVE-2014-9680.patch to fix unsafe handling of
  TZ environment variable [CVE-2014-9680], [bnc#917806].</changelog>

</package>
<package pkgid="982c4a9812dd4e37ec5cf763aed177385c85312410244aacb0a21d033a198c6f" name="sudo-devel" arch="x86_64">
    <version epoch="0" ver="1.8.10p3" rel="5.1"/>

<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>
<changelog author="michael@stroeder.com" date="1372334400">- Update to upstream release 1.8.7
  * remove CVE-2013-1775
  * remove CVE-2013-1776
  * The non-Unix group plugin is now supported when sudoers data is stored in LDAP.
  * User messages are now always displayed in the user's locale, even when the
  same message is being logged or mailed in a different locale.
  * Log files created by sudo now explicitly have the group set to group ID 0
  rather than relying on BSD group semantics (which may not be the default).
  * A new exec_background sudoers option can be used to initially run the
  command without read access to the terminal when running a command in a
  pseudo-tty.
  * Sudo now produces better error messages when there is an error in the sudo.conf file.
  * Two new settings have been added to sudo.conf to give the admin better control of
  how group database queries are performed.
  * There is now a standalone sudo.conf manual page.
  * New support for specifying a SHA-2 digest along with the command in sudoers.
  Supported hash types are sha224, sha256, sha384 and sha512. See the description
  of Digest_Spec in the sudoers manual or the description of sudoCommand in the
  sudoers.ldap manual for details.
  * Fixed potential false positives in visudo's alias cycle detection.
  * Sudo now only builds Position Independent Executables (PIE) by default on Linux
  systems and verifies that a trivial test program builds and runs.</changelog>
<changelog author="dmueller@suse.com" date="1372766400">- restore accidentally dropped suse-specific patches</changelog>
<changelog author="darin@darins.net" date="1373371200">- Enable SSSD as a sudoers data source</changelog>
<changelog author="darin@darins.net" date="1373371201">- Added patch to resolve packaging error. Patch has been sent
  upstream.
  * E: sudo 64bit-portability-issue ./sssd.c:829</changelog>
<changelog author="vcizek@suse.com" date="1373630400">- fix the default flag settings in manual to reflect changes caused by
  sudo-sudoers.patch (bnc#823292)</changelog>
<changelog author="vcizek@suse.com" date="1381233600">- update to 1.8.8
- drop sudo-plugins-sudoers-sssd.patch (upstream)
  * Removed a warning on PAM systems with stacked auth modules
    where the first module on the stack does not succeed.
  * Sudo, sudoreplay and visudo now support GNU-style long options.
  * The -h (--host) option may now be used to specify a host name.
    This is currently only used by the sudoers plugin in conjunction
    with the -l (--list) option.
  * Sudo's LDAP SASL support now works properly with Kerberos.
    Previously, the SASL library was unable to locate the user's
    credential cache.
  * It is now possible to set the nproc resource limit to unlimited
    via pam_limits on Linux (bug #565).
  * New "pam_service" and "pam_login_service" sudoers options
    that can be used to specify the PAM service name to use.
  * New "pam_session" and "pam_setcred" sudoers options that
    can be used to disable PAM session and credential support.
  * The sudoers plugin now properly supports UIDs and GIDs
    that are larger than 0x7fffffff on 32-bit platforms.
  * Fixed a visudo bug introduced in sudo 1.8.7 where per-group
    Defaults entries would cause an internal error.
  * If the "tty_tickets" sudoers option is enabled (the default),
    but there is no tty present, sudo will now use a ticket file
    based on the parent process ID.  This makes it possible to support
    the normal timeout behavior for the session.
  * Fixed a problem running commands that change their process
    group and then attempt to change the terminal settings when not
    running the command in a pseudo-terminal.  Previously, the process
    would receive SIGTTOU since it was effectively a background
    process.  Sudo will now grant the child the controlling tty and
    continue it when this happens.
  * The "closefrom_override" sudoers option may now be used in
    a command-specified Defaults entry (bug #610).
  * Fixed visudo's -q (--quiet) flag, broken in sudo 1.8.6.
  * Root may no longer change its SELinux role without entering
    a password.
  * Fixed a bug introduced in Sudo 1.8.7 where the indexes written
    to the I/O log timing file are two greater than they should be.
    Sudoreplay now contains a work-around to parse those files.</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- update to 1.8.9p3
- set secure_path to /usr/sbin:/usr/bin:/sbin:/bin
- changes since 1.8.8:
  * Fixed a bug introduced in sudo 1.8.9 that prevented the tty name
    from being resolved properly on Linux systems.  Bug #630.
  * Updated config.guess, config.sub and libtool to support the ppc64le
    architecture (IBM PowerPC Little Endian).
  * Fixed a problem with gcc 4.8's handling of bit fields that could
    lead to the noexec flag being enabled even when it was not
    explicitly set.
  * Reworked sudo's main event loop to use a simple event subsystem
    using poll(2) or select(2) as the back end.
  * It is now possible to statically compile the sudoers plugin into
    the sudo binary without disabling shared library support.  The
    sudo.conf file may still be used to configure other plugins.
  * Sudo can now be compiled again with a C preprocessor that does
    not support variadic macros.
  * Visudo can now export a sudoers file in JSON format using the
    new -x flag.
  * The locale is now set correctly again for visudo and sudoreplay.
  * The plugin API has been extended to allow the plugin to exclude
    specific file descriptors from the "closefrom" range.
  * There is now a workaround for a Solaris-specific problem where
    NOEXEC was overriding traditional root DAC behavior.
  * Add user netgroup filtering for SSSD. Previously, rules for
    a netgroup were applied to all even when they did not belong
    to the specified netgroup.
  * On systems with BSD login classes, if the user specified a group
    (not a user) to run the command as, it was possible to specify
    a different login class even when the command was not run as the
    super user.
  * The closefrom() emulation on Mac OS X now uses /dev/fd if possible.
  * Fixed a bug where sudoedit would not update the original file
    from the temporary when PAM or I/O logging is not enabled.
  * When recycling I/O logs, the log files are now truncated properly.
  * Fixes bugs #617, #621, #622, #623, #624, #625, #626</changelog>
<changelog author="vcizek@suse.com" date="1390392000">- added subpackage with a test for fate#313276</changelog>
<changelog author="vcizek@suse.com" date="1390996800">- update to 1.8.9p4
  * Fixed a bug where sudo could consume large amounts of CPU while
    the command was running when I/O logging is not enabled.
    Bug #631 (bnc#861153)
  * Fixed a bug where sudo would exit with an error when the debug
    level is set to util@debug or all@debug and I/O logging is not
    enabled. The command would continue runnning after sudo exited.</changelog>
<changelog author="vcizek@suse.com" date="1400155200">- update to 1.8.10p3
  * Fixed expansion of the %p escape in the prompt for "sudo -l"
    when rootpw, runaspw or targetpw is set. Bug #639.
  * Fixed matching of uids and gids which was broken in version 1.8.9
  * PAM credential initialization has been re-enabled. It was
    unintentionally disabled by default in version 1.8.8. The way
    credentials are initialized has also been fixed. Bug #642.
  * Fixed a descriptor leak on Linux when determing boot time. Sudo
    normally closes extra descriptors before running a command so
    the impact is limited. Bug #645.
  * Fixed flushing of the last buffer of data when I/O logging is
    enabled. This bug, introduced in version 1.8.9, could cause
    incomplete command output on some systems. Bug #646.
  * Fixed a hang introduced in sudo 1.8.10 when timestamp_timeout
    is set to zero. Bug #638.
  * It is now possible to disable network interface probing in sudo.conf
  * When listing a user's privileges (sudo -l), the sudoers plugin
    will now prompt for the user's password even if the targetpw,
    rootpw or runaspw options are set.
  * The sudoers plugin uses a new format for its time stamp files.
  * sudo's -K option will now remove all of the user's time stamps,
    not just the time stamp for the current terminal.
  * LDAP-based sudoers now uses a default search filter of
    (objectClass=sudoRole) for more efficient queries.
  * The new use_netgroups sudoers option can be used to explicitly
    enable or disable netgroups support.
  * Sudo is once again able to open the sudoers file when the
    group on sudoers doesn't match the expected value
  * The JSON format used by visudo -x now properly supports
    the negation operator.
  * Fixed a compilation error on AIX when LDAP support is enabled.
  * Fixed parsing of the "umask" defaults setting in sudoers.
  * Fixed a failed assertion when the "closefrom_override" defaults
    setting is enabled in sudoers and sudo's -C flag is used.
- option --with-timedir was renamed to --with-rundir
- don't install test LICENSE with executable perms</changelog>
<changelog author="kstreitova@suse.com" date="1445428800">- add sudo-1.8.10p3-CVE-2014-9680.patch to fix unsafe handling of
  TZ environment variable [CVE-2014-9680], [bnc#917806].</changelog>

</package>
<package pkgid="90330d27d12f022c404aaaa6a2e10a7b9e4566cbf8576e2421d23074bc567df4" name="sudo-test" arch="x86_64">
    <version epoch="0" ver="1.8.10p3" rel="5.1"/>

<changelog author="vcizek@suse.com" date="1327492800">- honour global CFLAGS and LDFLAGS when compiling sesh,
  to avoid rpmlint error (bnc#743157)</changelog>
<changelog author="vcizek@suse.com" date="1328011200">- update to 1.8.3p2
  * Fixed a format string vulnerability when the sudo binary
    (or a symbolic link to the sudo binary) contains printf
    format escapes and the -D (debugging) flag is used.</changelog>
<changelog author="vcizek@suse.com" date="1331294400">- update to 1.8.4p2
  Some of the changes:
  * The -D flag in sudo has been replaced with a more general
    debugging framework that is configured in sudo.conf.
  * Fixed a crash with sudo -i when a runas group was specified
    without a runas user.
  * New Serbian and Spanish translations for sudo from translationproject.org.
    LDAP-based sudoers may now access by group ID in addition to group name.
  * visudo will now fix the mode on the sudoers file even if no
    changes are made unless the -f option is specified.
  * On systems that use login.conf, sudo -i now sets environment
    variables based on login.conf
  * values in the LDAP search expression are now escaped as per RFC 4515
  * The deprecated "noexec_file" sudoers option is no longer supported.
  * Fixed a race condition when I/O logging is not enabled that could
    result in tty-generated signals (e.g. control-C) being received
    by the command twice.
  * visudo -c will now list any include files that were checked in
    addition to the main sudoers file when everything parses OK.
  * Users that only have read-only access to the sudoers file may
    now run visudo -c. Previously, write permissions were required
    even though no writing is down in check-only mode.</changelog>
<changelog author="vcizek@suse.com" date="1337169600">- update to 1.8.5
  Some of the changes:
  * /etc/environment is no longer read directly on Linux systems when
    PAM is used. Sudo now merges the PAM environment into the user's
    environment which is typically set by the pam_env module.
  * The plugin API has been extended
  * The policy plugin's init_session function is now called by the
    parent sudo process, not the child process that executes the command
    This allows the PAM session to be open and closed in the same process,
    which some PAM modules require.
  * A new group provider plugin, system_group, is included
  * Fixed a potential security issue in the matching of hosts against
    an IPv4 network specified in sudoers.The flaw may allow a user who
    is authorized to run commands on hosts belonging to one IPv4
    network to run commands on a different host (CVE-2012-2337)</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Update to version 1.8.5p2:
  + Fixed use of the SUDO_ASKPASS environment variable which was
    broken in Sudo 1.8.5.
  + Fixed a problem reading the sudoers file when the file mode is
    more restrictive than the expected mode.  For example, when the
    expected sudoers file mode is 0440 but the actual mode is 0400.
- Changes from version 1.8.5p1:
  + Fixed a bug that prevented files in an include directory from
    being evaluated.</changelog>
<changelog author="coolo@suse.com" date="1351252800">- add explicit buildrequire on groff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1352030400">- sudo 1.8.6p3
  * Support for using the System Security Services Daemon (SSSD) as a source of sudoers data
  * Fixed a race condition that could cause sudo to receive SIGTTOU (and stop)
  when resuming a shell that was run via sudo when I/O logging (and use_pty) is not enabled.
  * The sudoers plugin now takes advantage of symbol visibility controls when supported by the compiler or linker.
  * Sending SIGTSTP directly to the sudo process will now suspend
  the running command when I/O logging (and use_pty) is not enabled.</changelog>
<changelog author="cfarrell@suse.com" date="1354536000">- license update: ISC
  Look at the license file</changelog>
<changelog author="vcizek@suse.com" date="1362139200">- added two security fixes:
  * CVE-2013-1775 (bnc#806919)
    + sudo-1.8.6p3-CVE-2013-1775.patch
  * CVE-2013-1776 (bnc#806921)
    + sudo-1.8.6p3-CVE-2013-1776.patch</changelog>
<changelog author="michael@stroeder.com" date="1372334400">- Update to upstream release 1.8.7
  * remove CVE-2013-1775
  * remove CVE-2013-1776
  * The non-Unix group plugin is now supported when sudoers data is stored in LDAP.
  * User messages are now always displayed in the user's locale, even when the
  same message is being logged or mailed in a different locale.
  * Log files created by sudo now explicitly have the group set to group ID 0
  rather than relying on BSD group semantics (which may not be the default).
  * A new exec_background sudoers option can be used to initially run the
  command without read access to the terminal when running a command in a
  pseudo-tty.
  * Sudo now produces better error messages when there is an error in the sudo.conf file.
  * Two new settings have been added to sudo.conf to give the admin better control of
  how group database queries are performed.
  * There is now a standalone sudo.conf manual page.
  * New support for specifying a SHA-2 digest along with the command in sudoers.
  Supported hash types are sha224, sha256, sha384 and sha512. See the description
  of Digest_Spec in the sudoers manual or the description of sudoCommand in the
  sudoers.ldap manual for details.
  * Fixed potential false positives in visudo's alias cycle detection.
  * Sudo now only builds Position Independent Executables (PIE) by default on Linux
  systems and verifies that a trivial test program builds and runs.</changelog>
<changelog author="dmueller@suse.com" date="1372766400">- restore accidentally dropped suse-specific patches</changelog>
<changelog author="darin@darins.net" date="1373371200">- Enable SSSD as a sudoers data source</changelog>
<changelog author="darin@darins.net" date="1373371201">- Added patch to resolve packaging error. Patch has been sent
  upstream.
  * E: sudo 64bit-portability-issue ./sssd.c:829</changelog>
<changelog author="vcizek@suse.com" date="1373630400">- fix the default flag settings in manual to reflect changes caused by
  sudo-sudoers.patch (bnc#823292)</changelog>
<changelog author="vcizek@suse.com" date="1381233600">- update to 1.8.8
- drop sudo-plugins-sudoers-sssd.patch (upstream)
  * Removed a warning on PAM systems with stacked auth modules
    where the first module on the stack does not succeed.
  * Sudo, sudoreplay and visudo now support GNU-style long options.
  * The -h (--host) option may now be used to specify a host name.
    This is currently only used by the sudoers plugin in conjunction
    with the -l (--list) option.
  * Sudo's LDAP SASL support now works properly with Kerberos.
    Previously, the SASL library was unable to locate the user's
    credential cache.
  * It is now possible to set the nproc resource limit to unlimited
    via pam_limits on Linux (bug #565).
  * New "pam_service" and "pam_login_service" sudoers options
    that can be used to specify the PAM service name to use.
  * New "pam_session" and "pam_setcred" sudoers options that
    can be used to disable PAM session and credential support.
  * The sudoers plugin now properly supports UIDs and GIDs
    that are larger than 0x7fffffff on 32-bit platforms.
  * Fixed a visudo bug introduced in sudo 1.8.7 where per-group
    Defaults entries would cause an internal error.
  * If the "tty_tickets" sudoers option is enabled (the default),
    but there is no tty present, sudo will now use a ticket file
    based on the parent process ID.  This makes it possible to support
    the normal timeout behavior for the session.
  * Fixed a problem running commands that change their process
    group and then attempt to change the terminal settings when not
    running the command in a pseudo-terminal.  Previously, the process
    would receive SIGTTOU since it was effectively a background
    process.  Sudo will now grant the child the controlling tty and
    continue it when this happens.
  * The "closefrom_override" sudoers option may now be used in
    a command-specified Defaults entry (bug #610).
  * Fixed visudo's -q (--quiet) flag, broken in sudo 1.8.6.
  * Root may no longer change its SELinux role without entering
    a password.
  * Fixed a bug introduced in Sudo 1.8.7 where the indexes written
    to the I/O log timing file are two greater than they should be.
    Sudoreplay now contains a work-around to parse those files.</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- update to 1.8.9p3
- set secure_path to /usr/sbin:/usr/bin:/sbin:/bin
- changes since 1.8.8:
  * Fixed a bug introduced in sudo 1.8.9 that prevented the tty name
    from being resolved properly on Linux systems.  Bug #630.
  * Updated config.guess, config.sub and libtool to support the ppc64le
    architecture (IBM PowerPC Little Endian).
  * Fixed a problem with gcc 4.8's handling of bit fields that could
    lead to the noexec flag being enabled even when it was not
    explicitly set.
  * Reworked sudo's main event loop to use a simple event subsystem
    using poll(2) or select(2) as the back end.
  * It is now possible to statically compile the sudoers plugin into
    the sudo binary without disabling shared library support.  The
    sudo.conf file may still be used to configure other plugins.
  * Sudo can now be compiled again with a C preprocessor that does
    not support variadic macros.
  * Visudo can now export a sudoers file in JSON format using the
    new -x flag.
  * The locale is now set correctly again for visudo and sudoreplay.
  * The plugin API has been extended to allow the plugin to exclude
    specific file descriptors from the "closefrom" range.
  * There is now a workaround for a Solaris-specific problem where
    NOEXEC was overriding traditional root DAC behavior.
  * Add user netgroup filtering for SSSD. Previously, rules for
    a netgroup were applied to all even when they did not belong
    to the specified netgroup.
  * On systems with BSD login classes, if the user specified a group
    (not a user) to run the command as, it was possible to specify
    a different login class even when the command was not run as the
    super user.
  * The closefrom() emulation on Mac OS X now uses /dev/fd if possible.
  * Fixed a bug where sudoedit would not update the original file
    from the temporary when PAM or I/O logging is not enabled.
  * When recycling I/O logs, the log files are now truncated properly.
  * Fixes bugs #617, #621, #622, #623, #624, #625, #626</changelog>
<changelog author="vcizek@suse.com" date="1390392000">- added subpackage with a test for fate#313276</changelog>
<changelog author="vcizek@suse.com" date="1390996800">- update to 1.8.9p4
  * Fixed a bug where sudo could consume large amounts of CPU while
    the command was running when I/O logging is not enabled.
    Bug #631 (bnc#861153)
  * Fixed a bug where sudo would exit with an error when the debug
    level is set to util@debug or all@debug and I/O logging is not
    enabled. The command would continue runnning after sudo exited.</changelog>
<changelog author="vcizek@suse.com" date="1400155200">- update to 1.8.10p3
  * Fixed expansion of the %p escape in the prompt for "sudo -l"
    when rootpw, runaspw or targetpw is set. Bug #639.
  * Fixed matching of uids and gids which was broken in version 1.8.9
  * PAM credential initialization has been re-enabled. It was
    unintentionally disabled by default in version 1.8.8. The way
    credentials are initialized has also been fixed. Bug #642.
  * Fixed a descriptor leak on Linux when determing boot time. Sudo
    normally closes extra descriptors before running a command so
    the impact is limited. Bug #645.
  * Fixed flushing of the last buffer of data when I/O logging is
    enabled. This bug, introduced in version 1.8.9, could cause
    incomplete command output on some systems. Bug #646.
  * Fixed a hang introduced in sudo 1.8.10 when timestamp_timeout
    is set to zero. Bug #638.
  * It is now possible to disable network interface probing in sudo.conf
  * When listing a user's privileges (sudo -l), the sudoers plugin
    will now prompt for the user's password even if the targetpw,
    rootpw or runaspw options are set.
  * The sudoers plugin uses a new format for its time stamp files.
  * sudo's -K option will now remove all of the user's time stamps,
    not just the time stamp for the current terminal.
  * LDAP-based sudoers now uses a default search filter of
    (objectClass=sudoRole) for more efficient queries.
  * The new use_netgroups sudoers option can be used to explicitly
    enable or disable netgroups support.
  * Sudo is once again able to open the sudoers file when the
    group on sudoers doesn't match the expected value
  * The JSON format used by visudo -x now properly supports
    the negation operator.
  * Fixed a compilation error on AIX when LDAP support is enabled.
  * Fixed parsing of the "umask" defaults setting in sudoers.
  * Fixed a failed assertion when the "closefrom_override" defaults
    setting is enabled in sudoers and sudo's -C flag is used.
- option --with-timedir was renamed to --with-rundir
- don't install test LICENSE with executable perms</changelog>
<changelog author="kstreitova@suse.com" date="1445428800">- add sudo-1.8.10p3-CVE-2014-9680.patch to fix unsafe handling of
  TZ environment variable [CVE-2014-9680], [bnc#917806].</changelog>

</package>
<package pkgid="4dfe9674446d7997562980667328b5926566376ee6dda42bbfef2c52e00ac237" name="translation-update" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="4b924397a77e6f6311c2f89b2bb892f2d1440acd3a77abe0e80aac16796edfec" name="translation-update" arch="src">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="jhargadon@suse.de" date="1159963200">- initial submission of package</changelog>
<changelog author="jhargadon@suse.de" date="1161259200">- added french translations for yelp and zen-updater for bug
  [#204335]</changelog>
<changelog author="ke@suse.de" date="1186142400">- Add Arabian (ar), African (af, xh, and zu), and Indian (bn, gu, hi, mr,
  and ta) and Polish (pl); #281412 and SWAMPID 11144.
- Remove outdated yast translatations.</changelog>
<changelog author="ro@suse.de" date="1187697600">- completely comment out disabled subpacks</changelog>
<changelog author="ke@suse.de" date="1200052800">- Update translations: de, es, fi, ja, and pt_BR; #350693.</changelog>
<changelog author="ke@suse.de" date="1200052801">- Reset translations for openSUSE 11.0; see #353229.</changelog>
<changelog author="ke@suse.de" date="1219060800">- Also reset cs and pl (for 11.1); see bnc#404073,
  bnc#399561. bnc#402551, bnc#402885, and bnc#407285.</changelog>
<changelog author="ke@suse.de" date="1234872000">- General post-GA translation update (bnc#464470).</changelog>
<changelog author="ke@suse.de" date="1234958400">- Also add Wallon (wa) trying to fix bnc#438980.
- Add Punjabi (pa).</changelog>
<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="3ba87d77ddee34c2eba0394d31f49218a213da1dd0702571177c631870864f55" name="translation-update-ar" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="b0f8883fc3f484975cc45870a8121272017f1cb4bfc9c467f25b8b89c609f655" name="translation-update-as" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="a9a89da02402a50aa89feb4ed900ef290d2b2785ff3252e57fcb87a074ddb091" name="translation-update-be" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="094209d075e5509036af3571e414be09838a3e759a7d2d26d57b403bbe4ede3b" name="translation-update-bg" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="8e98265daae9e48538aaa3b9ad5f2c433c8ee2e0cc0b75528b5002c7c15548ac" name="translation-update-bn" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="31830ea5a6d1aefca85296fc0a30ee169cd91b82a669562948260f4e0f015c59" name="translation-update-bn_IN" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="c0afd337e95d6d14c954180a3d3b88888d08a2f977b73406b130e461beaa77b2" name="translation-update-ca" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="b8cc270947dca84ca8a4453bb0c76eb43fa8f136ab3145225fd94b8c51c0258e" name="translation-update-caValencia" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="111d9cb2d81d903f40667680e4a529286586b24d82fd4afeffc1636c148168ae" name="translation-update-cs" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="0de21fd7e428d958cfc27c90edc7f4b443139e3cab2773c9746a4c0743eae72b" name="translation-update-da" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="d18947bd095beb67823f8d31516eb43fc8acc41858740899ee503ca1185a168e" name="translation-update-de" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="818cc6b4511f5017eed6a5aaaaee64df9c0892979f5e1f43d5498e907e0bd6d3" name="translation-update-el" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="51a22fed7fd6f4a0220d7e818cb840efe0a0e8a3473820006f366d9e3f981f4d" name="translation-update-en_GB" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="8c1cd5d6d02dfb870163e164fbfbcdb7373c3aaea30de08e5646c1dc5b674ff1" name="translation-update-en_US" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="f56e48d55c8fb8fb3daed0f33550692219b76855ffc0e98bf3ed64874fd5b4bc" name="translation-update-eo" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="26b8b905cd4ce336aadefd44997d659c95a1e782dbf22bd4f0e34c96bc5ac938" name="translation-update-es" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="623305093e08e656de9b6180b504aef4caa01ac5838e51d1612d865802a60338" name="translation-update-et" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="3a608a5eff4328733232de6ea931eec743dee2b44339245c52438507a69e9ba5" name="translation-update-eu" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="0e66584f897353e5e36cf0b870e6f59cea4c26624c8fcd57d850f8fd0752f2af" name="translation-update-fa" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="437451c3af76dce5ed5475a865127141df49d53c61e4b5d545b3f984f6789a38" name="translation-update-fi" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="54682481e08d1ff90f0f00333be63f212d2fc58aa1bdbf1185a278937c86ae5b" name="translation-update-fr" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="cb53e164c11159b4b4153907a2c7b1dde7c40f433851a1adb2e6ae05abada845" name="translation-update-gl" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="2f980f938372f9ee0b89a2d7d2733a94c727bf020a22fdcc6db17b0279e123b2" name="translation-update-gu" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="044fa9bf77cf53b09e44f965256218fd3a0c0e98c4bf216843f2554b3e55e417" name="translation-update-he" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="b2d5a9bb1703556b2d90decff78eba94d743f3bc8e0bc636fd76f86acb0ad07c" name="translation-update-hi" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="700274e8024fe3b946c4ffde8c468cb1a8178fade16b2396d7cff40c9e0f003c" name="translation-update-hr" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="8d8c02c09f9bb0e38d746dc270e2572daff6d953d0c8733ae8fe848faacc75d5" name="translation-update-hu" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="d56b49d6979ce242ffeaaec2efd4922955a39cf128726db1f6ab95d6fb88ef27" name="translation-update-id" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="417bedbe7525309372b2ddcd41292e1b74725e23205cdaddc218e6283783e28e" name="translation-update-it" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="e690119974f51770fb41015749afd3a3426efb9e0fb3f62f49953646a19b67e0" name="translation-update-ja" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="212810d5e1460a6d93070ed075354d88b88dd882e7429308606d1e8e2f9ac8c2" name="translation-update-kk" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="d3021d945895ffb611e032f75bb5ea41757dfa5c0e30df505a26dd04598d7898" name="translation-update-km" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="426fadd8bbe0b0d177eec8e8ee069f1f7b47b7f9dc2101a6ae0254110a020730" name="translation-update-kn" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="5e30541aca9449f00695ca1a5468a65a3e35ebc991df0237487498de0898cf23" name="translation-update-ko" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="da2014f7a3488c26588526d63be26dd2daf94a06b422254f17d170458de9b35f" name="translation-update-lt" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="bfb770f23c70c5e1daa9c052248a0aea2b6a56d26c49160412170f4391b3cc4b" name="translation-update-lv" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="9ce8b0ef273ae6120b93f45d7a508858cf90947f3a5f04be128d01ea2784126a" name="translation-update-ml" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="ed10eba381e2463cd1fe05f68dc1083dcd3abd1999d6987b3a75893cfb9c1b71" name="translation-update-mr" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="df72371b895e52a856495aaf317763ff69bb743213172c030a75bee572e9b5b5" name="translation-update-nb" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="328804957e6b22372e5c3b32141d2a7d81a3f73e8e614fc04593a56407710a51" name="translation-update-nl" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="e6b962695728e302cc2e2476957d2033002759e54162d3dd623cd0aed7b0b244" name="translation-update-nn" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="fe466a2d2f2d9e067c951a97cfe0abf5e58271adf6d47bb0bc37a27b534128fd" name="translation-update-or" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="0b9733679cb48fadd29b67f0c54a7c00bb7070b9d1f394e503fdb5c0c66c3616" name="translation-update-pa" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="1a487824dea4ce2055d992c187fd3a5112c5113d766de465ed80657e112d44bb" name="translation-update-pl" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="973b94f4bdf17900f5225aa393db4bcb2d5f11c7272130868f42bc84c076788e" name="translation-update-pt" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="398e530d0cce24ac6d62ee9405a3f10ba564a9aa03ed0281e55a65aeb5dd19ec" name="translation-update-pt_BR" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="811c412efe8515ea2d11668a0fb5495488988ad01170dec6e66fbd9c152ce06e" name="translation-update-ro" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="907a1fb591cb35bc11515fc3a1c07e1f645cee92797d15e86e332d0aa7c5be0a" name="translation-update-ru" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="ae49a883a3ba4baf2fe2a321c8de63b69bf7d3e074c6112005489d0f366261dc" name="translation-update-sk" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="dcfcc05dddcd8fe37b045f0c2eaa427f2028767185c6130fae770bfff6c9847f" name="translation-update-sl" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="9a5021fb7a83dbce04faedd85087fd628dbeb00f6543bf2f0b00b478a536c412" name="translation-update-sr" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="3a8e97fa75ce92e71b1ace957d8b69d046eb5c037e5bdbe62915e904c88f705a" name="translation-update-srLatin" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="d5e67065dccfaa6d24a20b472e9ad781119cf21fd76a478dbc053d5f73f4aca8" name="translation-update-sv" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="67a00e0e6938bd43b7cf056ffb3533813df40917fe18d24395fd20b32332e1a3" name="translation-update-ta" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="011ad66b0fc3c856735c157377ff106ffd4008bb87cc45916c74a01c89e2890a" name="translation-update-te" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="8a546ab1f0f4dacae9b83b6c2ad7590358b483c3967f46da8c82263e3d39c80c" name="translation-update-th" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="c6f138a37bc1ae1ca42eb39fa7ece9ce5f7495e5d21619c3223e8b093ddf0008" name="translation-update-tr" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="afa2364f59d27509d7922cf48751c8034e4947f4b7c3156184080fefc143ab01" name="translation-update-ug" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="713c130e9d546c3a60f7123a6fa7e8a65bb63cd623584afdc2c48c29278bdff9" name="translation-update-uk" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="9b9eafa91869b4b655b8fb018ae5862e0287161da7e9fdc64a8a5d5fee634309" name="translation-update-vi" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="edee9492a236fef994da7838ffe2dcb5e7fd67c076ef808e8719d17ff15818a6" name="translation-update-zh_CN" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="1ec7e108e6179c5f3853f845254f4b7e64f83330c67f1577d55ca9b84f207117" name="translation-update-zh_HK" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="c261ff406a94397831d223b3b064d7c869fc4705ebe3c1ca2facf1b7c14a7b61" name="translation-update-zh_TW" arch="noarch">
    <version epoch="0" ver="12.3" rel="13.1"/>

<changelog author="ke@suse.de" date="1237204800">- Reset all translation-update-* packages for 11.2.
- reset-translation-update.sh: New helper script.</changelog>
<changelog author="ke@suse.de" date="1256040000">- Increase version number.</changelog>
<changelog author="coolo@novell.com" date="1263988800">- increase version number to 11.3
- remove authors from description</changelog>
<changelog author="ke@suse.de" date="1273838400">- reset-translation-update.sh: Fix sed script.</changelog>
<changelog author="ke@suse.de" date="1301486400">- increase version number to 11.4.
- translation updates mostly because of webyast, but other software
  components such as zypper were also affected:
  da de es fi fr gl hr hu it ja km lt nb nl pl ro ru wa pt_BR.</changelog>
<changelog author="ke@suse.de" date="1302782400">- Increase version number to 12.1.
- Reset all translation-update-* packages for 12.1 using
  reset-translation-update.sh.</changelog>
<changelog author="sbrabec@suse.cz" date="1361188800">- Set version to 12.3.
- Added support for auto-generated
  translation-update-from-translation-update-upstream tarball
  with translation updates and added
  translation-update-from-translation-update-upstream-20130214.tar.bz2
- Added support for last minute translations
  (translation-update2.tar.bz2).
- Added two supplementary scripts that allow to generate package
  list dynamically (translation-update-reset-lang-list.sh,
  translation-update-generate-lang-list.sh).
- Added translation-update.rpmlintrc.
- Small improvements of %build and %install to run faster with
  cleaner log.</changelog>
<changelog author="tchvatal@suse.com" date="1399032000">- Rename ca@valencia and sr@latn to caValencia and srLatn to work
  again on Factory.</changelog>
<changelog author="sbrabec@suse.cz" date="1399464000">- Fix for empty tarballs.
- Fix translation-update-generate-lang-list.sh for "@" in locale
  names.
- Rename translation-update-spec-reset-lang-list.sh and
  translation-update-spec-generate-lang-list.sh to make visible its
  relation to the spec file.</changelog>
<changelog author="sbrabec@suse.com" date="1446552000">- Replace update tarball with
  translation-update-from-translation-update-upstream-20151102.tar.bz2
  that contains just dirs and no files, add spec line to generate
  empty update packages (boo#952855).
- Obsolete all language packages that are no longer distributed
  (boo#952855#c41).</changelog>

</package>
<package pkgid="03a32ff556e1f375425d1612d4c8ddfef244fbe96c2e8194e0179fb121f318f6" name="typelib-1_0-Avahi-0_6" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="26.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="5b44ff741cd8109b080833175d47ad5cb41e2a7cd67a4c7e524d2fd2e679a45c" name="typelib-1_0-Gdm-1_0" arch="x86_64">
    <version epoch="0" ver="3.14.2" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1385640000">- Update to version 3.11.2:
  + XDMCP fixes.
  + BSD portability fixes.
  + Assorted changes to build goop.
  + Updated translations.
- Pass --with-gnome-settings-daemon-directory to configure.
- Drop gdm-XDMCP-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 3.11.3:
  + Infinite loop fix.
  + Require debugging to be explicitly enabled in unstable
    versions.
  + Pass LC_ vars from system to user session.
  + Fix PAM reauthentication.
  + Updated translations.
- Drop gdm-is-not-unstable-unless.patch: debugging is no longer
  enabled by default on unstable releases.</changelog>
<changelog author="dimstar@opensuse.org" date="1389787200">- Update to version 3.11.4:
  + Treat '' returned from a PAM module as "no username set" in the
    same way NULL is.
  + Fix to work with more open dbus policy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1392984000">- Update to version 3.11.90:
  + Code clean ups.
  + Leak fixes.
  + Log X server to systemd journal.
  + Log fixes on none systemd systems.
  + Fail better when invoked wrong.
  + Change how dconf settings are used.
  + FreeBSD build fixes.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch,
  gdm-passwordless-login.patch and gdm-sysconfig-settings.patch.
- Disable gdm-xauthlocalhostname.patch: Needs rebasing.</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92.1:
  + BSD build fixes.
- Changes from version 3.11.92:
  + BSD build fixes.
  + Experimental Wayland support.
  + Support gnome-shell unlocking from non GDM sessions.
  + Drop slave process.
  + Onscreen keyboard support at login screen.
  + Updated translations.
- Rebase gdm-desktop-session-env-pam.patch.
- Copy autogen.sh to PWD instead of launching it from the SOURCE
  directory.
- Synchronize autogen.sh with gdm git tree.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix automatic login.
  + Fix timed login.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Drop dead code.
  + support XDG_CURRENT_DESKTOP.
  + Fix PID file in build goo.
  + doap file fix ups.
  + Improve Fedora PAM config with regard to gnome-keyring.
  + Small wayland fixes.
  + ConsoleKit fixes.
  + Fixes to non-GDM session unlock corner cases.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1400328000">- Update to version 3.12.2:
  + Work around ugly "Last Login" messages in fedora.
  + Fix PATH variable.
  + Fix undead worker processes.
  + Fix crash on logout after user switching.</changelog>
<changelog author="fcrozat@suse.com" date="1401278400">- Remove scrollkeeper configure flag, no longer exists.
- Only build ConsoleKit support when not building systemd support.
- Update gdm-launch-environment.pamd to not call pam_loginuid, it
  was causing gdm logind session to not be detected as a greeter
  session.</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Update X11-displaymanager-gdm: remove call to splashcopy, useless
  with plymouth.</changelog>
<changelog author="dimstar@opensuse.org" date="1403524800">- Really drop gdm-greeter-greater-ui.patch: it has been removed
  during the 3.9.5 update, but the patch file was not deleted.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add gdm-plymouth-vt1.patch: switch back to VT1 when terminating
  gdm, if plymouth was running at startup (bnc#881676).</changelog>
<changelog author="zaitor@opensuse.org" date="1410091200">- Update to version 3.13.91:
  + Fix crash when typing password at screen lock.
  + Fix default signal mask of session to not block SIGUSR1.
  + Memory leak fixes.
  + Fix for when building without consolekit.
  + Fix autologin pam config on GNOME Continuous.
  + Fix timed login race.
  + Again read LANG from accountsservice.
  + Misc fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1410955200">- Update to version 3.13.92:
  + Compat fixes to work with latest caribou.
  + Minor code clean up.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + Updated translations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1413115200">- Drop unused libattr-devel BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1413288000">- Update to version 3.14.1:
  + Update fedora PAM config to be more tolerant of /etc/nologin.
  + leak fixes in libgdm.
  + Fix spew on console generated from conversations that get
    cancelled when they're closing.
  + Drop some lingering fallback greeter cruft.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1423569600">- Only install gdm-fingerprint and gdm-smartcard pamfiles if
  enable_split_authentication is enabled (boo#900836).</changelog>
<changelog author="badshah400@gmail.com" date="1427716800">- Update to version 3.14.2 (boo#924072):
  + Leak fix.
  + Import locale into environment.
  + Make sure plymouth gets quit if GDM fails.
  + XDMCP fixes.
  + Propagate XCURSOR_PATH and XDG_CONFIG_DIRS to greeter.</changelog>
<changelog author="dimstar@opensuse.org" date="1446811200">- Drop caribou-autostart.desktop: it is not properly configured for
  the installation of caribou and is also no longer needed. Since
  gnome-shell 3.14, caribou is started through d-bus (boo#953665,
  bgo#740788).</changelog>

</package>
<package pkgid="64bc36d513e931cd3d14be7ce4ebddc9cdb119bc7ac065b79fd46a7a6b9171bf" name="typelib-1_0-Gtk-3_0" arch="x86_64">
    <version epoch="0" ver="3.16.7" rel="5.1"/>

<changelog author="zaitor@opensuse.org" date="1424952000">- Update to version 3.15.6:
  + stylecontext: Don't use cache when unsaved. Fixes
    image-load-from-file reftest.
- Changes from version 3.15.5:
  + GTK+ types now support the GLib g_autoptr() facility for
    automatic cleanup of automatic variables. GTK+ itself does
    not use g_autoptr() internally.
  + GtkSearchEntry has gained ::next-match, ::previous-match
    and ::stop-search signals and a gtk_search_entry_handle_event()
    function, which help in providing a richer search experience
    and make search entries usable outside of GtkSearchBar.
  + GtkFileChooser:
  - The search has been reintegrated in the UI, there is now
    a toggle button on the header bar to go to search mode,
    in addition to the Alt-S shortcut.
  - The file chooser button now accepts files by drag-and-drop
    properly.
  + GtkScrolledWindow has gained a new ::edge-reached signal, which
    triggers when the edge of the scrollable area is reached.
  + CSS: Performance improvements.
  + OpenGL:
  - It is now possible to specify the required GL version, as
    well as some other options (debug, forward compatible) when
    creating a GdkGLContext.
  - Support for the OpenGL legacy profile has been dropped. Most
    examples have been updated, with the exception of gdkgears,
    which will be fixed in the next snapshot.
  - Use shader version 1.50.
  + Mir backend: Many improvements.
  + Bugs fixed: bgo#712752, bgo#725164, bgo#732051, bgo#735316,
    bgo#740336, bgo#740613, bgo#742636, bgo#742953, bgo#743146,
    bgo#743193, bgo#743229, bgo#743257, bgo#743286, bgo#743330,
    bgo#743341, bgo#743393, bgo#743422, bgo#743451, bgo#743592,
    bgo#743593, bgo#743633, bgo#743638, bgo#743647, bgo#743659,
    bgo#743660, bgo#743680, bgo#613833, bgo#741946, bgo#742566,
    bgo#742848, bgo#743395, bgo#743640, bgo#743770, bgo#743894,
    bgo#743917, bgo#743975, bgo#744203, bgo#744212.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952001">- Update to version 3.15.7:
  + GtkListBox now supports models with gtk_list_box_bind_model.
  + GtkNotebook has a new function to support tab dnd.
  + GtkSidebar was renamed to GtkStackSidebar to better convey what
    it does.
  + GtkFileChooser now has a location column for search.
  + GdkGLProfile has been removed.
  + Bugs fixed: bgo#695945, bgo#708320, bgo#741946, bgo#743350,
    bgo#744148, bgo#744172, bgo#744204, bgo#744394, bgo#744400,
    bgo#744407, bgo#744455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952002">- Update to version 3.15.8:
  + CSS: Support animated font weight changes.
  + GtkScrolledWindow: Ensure indicators appear in the correct
    place.
  + Wayland: DND fixes.
  + GtkPopover: has a map/unmap animation now.
  + Bugs fixed: bgo#743647, bgo#744054, bgo#744683.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424952003">- Update to version 3.15.9:
  + GtkScrolledWindow:
  - Avoid 'jumping' when zoom scrolling kicks in.
  - Make zoom scrolling less easy to trigger.
  - Make steppers use smooth autoscrolling.
  + Input methods can now be turned off entirely, which can be
    useful to free up the Ctrl-Shift-u shortcut.
  + Add some DND support to gtk3-icon-browser.
  + Bugs fixed: bgo#696505, bgo#744942, bgo#744991, bgo#745052,
    bgo#745076.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) and pkgconfig(rest-0.7)
  BuildRequires: used to enable cloud printing.
- Add explicit gettext-tools BuildRequires: the build uses msgfmt,
  but in some rare occasions, gettext-tools-mini is favored, which
  does not provide this tool.</changelog>
<changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 3.15.10:
  + GtkFileChooser:
  - Don't start search too eagerly.
  - Use fts with tracker.
  - Make tracker queries more similar to nautilus.
  + GtkWindow: Improve window dragging on header bars.
  + Printing:
  - Make avahi-browsed printers work.
  - Set printer state correctly.
  + Wayland:
  - Exit cleanly if the compositor goes away.
  - Don't ignore early maximization/fullscreening.
  - Make subsurface popovers work under Weston.
  + GL: Port GdkGears example to modern OpenGL.
  + Bugs fixed: bgo#703610, bgo#729366, bgo#741511, bgo#743323,
    bgo#743427, bgo#744879, bgo#745225, bgo#745263, bgo#745289,
    bgo#745303, bgo#745315, bgo#745344, bgo#745400.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1426161600">- Update to version 3.15.11:
  + Go back to requiring GTK_FRAME_EXTENTS support for CSD, to fix
    shadow problems in KDE.
  + Print dialog: Fix icons in HighContrast.
  + Fix selected menu items in HighContrast.
  + App chooser: Fix icons in HighContrast.
  + Bugs fixed: bgo#535929, bgo#577862, bgo#669008, bgo#712760,
    bgo#739070, bgo#744288, bgo#744589, bgo#745065, bgo#745463,
    bgo#745479, bgo#745562, bgo#745578, bgo#745622, bgo#745721,
    bgo#745918, bgo#745969, bgo#746013.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 3.15.12:
  + GtkMenuButton: Improve accessible names.
  + GtkCellRendererPixbuf: Always follow state changes, the
    ::follow-state property is now ignored. This is necessary to
    make HighContrast and symbolic icons remain visible e.g. in
    selected rows.
  + GtkEntry: Rework the size allocation code to be less arcane.
    This changed the semantics of the get_frame_size() vfunc.
    GtkEntry subclasses that override this vfunc may need
    adjustment.
  + Wayland: Support hi-dpi cursors.
  + Bugs fixed: bgo#745829, bgo#746141, bgo#746192, bgo#746201,
    bgo#746202, bgo#746205, bgo#746282, bgo#746301.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426766400">- Rebase and re-enable gtk3-path-local.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + Theming: Fixes for the HighContrast theme.
  + Wayland: Fix Clipboard handling.
  + Bugs fixed: bgo#746148, bgo#746149, bgo#746188, bgo#746358,
    bgo#746368, bgo#746369, bgo#746370, bgo#746386.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1428494400">- Update to version 3.16.1:
  + Improve client-side decorations without a compositor.
  + Bugs fixed: bgo#132197, bgo#402168, bgo#613833, bgo#671362,
    bgo#734741, bgo#737175, bgo#746222, bgo#746253, bgo#746301,
    bgo#746391, bgo#746468, bgo#746586, bgo#746602, bgo#746688,
    bgo#746712, bgo#746746, bgo#746784, bgo#746817, bgo#746821,
    bgo#746862, bgo#746893, bgo#746904, bgo#746961, bgo#747096,
    bgo#747133, bgo#747305, bgo#747406, bgo#747407.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.2:
  + Avoid a crash in GtkApplication.
  + Avoid a crash with GtkTreeview rubberbanding.
  + GtkApplication: Prevent more crashes around shutdown.
  + Prevent tab close button size changes.
  + Bugs fixed: bgo#746706, bgo#747288, bgo#747471, bgo#747539,
    bgo#747608, bgo#747689.
  + Updated translations.
- Drop gtk3-find-wayland-includedir.patch: Not needed anymore.
- Disable gtk3-bnc130159-bgo319483-async-font-selection.patch:
  Upstream bug was closed as obsolete in 2011, lets disable for now
  and see if anyone misses it.</changelog>
<changelog author="zaitor@opensuse.org" date="1431432000">- Update to version 3.16.3:
  + Bugs fixed: bgo#737175, bgo#746916, bgo#746925, bgo#747634,
    bgo#747805, bgo#747808, bgo#748013, bgo#748014, bgo#748061,
    bgo#748341, bgo#748346, bgo#748500, bgo#748615, bgo#748640,
    bgo#748782, bgo#748783, bgo#748992, bgo#749009, bgo#749012,
    bgo#749021.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1433937600">- Update to version 3.16.4:
  + Bugs fixed: bgo#693738, bgo#719683, bgo#745957, bgo#749451,
    bgo#749593, bgo#749893, bgo#750058, bgo#750384, bgo#750477,
    bgo#750505.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1434628800">- Move pkgconfig(epoxy) BuildRequires out of with_wayland
  condition: it is used independent of wayland support.</changelog>
<changelog author="zaitor@opensuse.org" date="1436270400">- Update to version 3.16.5:
  + Fix ridge/groove border rendering.
  + GtkListBoxRow: propagate in the draw vfunc.
  + Bugs fixed: bgo#750489, bgo#750605, bgo#750690, bgo#750718,
    bgo#750870, bgo#750888, bgo#750994, bgo#751018, bgo#751050,
    bgo#751082, bgo#751227, bgo#751443, bgo#751739, bgo#751752,
    bgo#751754.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1436961600">- Add gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Revert a commit as it makes hardware mouse-wheel scrolling
  unreliable (bgo#752184).</changelog>
<changelog author="zaitor@opensuse.org" date="1437480000">- Update to version 3.16.6:
  + OS X: Partial aspect ratio support.
  + Revert a problematic change to scroll event handling.
  + Bugs fixed: bgo#741800, bgo#751401, bgo#751625, bgo#752016,
    bgo#752093, bgo#752520.
  + Updated translations.
- Drop
  gtk3-Revert-x11-Query-pointer-devices-scroll-valuators.patch:
  Fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1442577600">- Update to version 3.16.7:
  + Bugs fixed: bgo#345345, bgo#579466, bgo#751721, bgo#753621,
    bgo#753628, bgo#753644, bgo#754535.
  + Updated translations.</changelog>
<changelog author="badshah400@gmail.com" date="1445601600">- Add gtk3-GtkMenuButton-protect-against-recursion.patch to guard
  against recursion in GtkMenuButton, prevent application crashes
  when using them in non-accelerated graphics environments such
  as VM; patch taken from upstream git (boo#950678, bgo#752577).</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Add gtk3-places-sidebar-no-crash.patch: Do not crash if dragging
  something over the places sidebar, that has no valid URI (mostly
  coming from a host system into a guest system) (boo#952356,
  bgo#757298).</changelog>

</package>
<package pkgid="f676d74789bf059178038d54cccbf2c2f804c4b884eae42bda429f91ad757c5a" name="typelib-1_0-Polkit-1_0" arch="x86_64">
    <version epoch="0" ver="0.113" rel="6.1"/>

<changelog author="dlovasko@suse.com" date="1328616000">- fixed bnc#743145 - added -fpie/-pie flags to compilation and linking of polkit-agent-helper and pkexec</changelog>
<changelog author="vuntz@opensuse.org" date="1330084800">- Change the way we pass -fpie/-pie:
  + Drop polkit-pie.patch: this was not upstreamable.
  + Add polkit-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
    when building the suid binaries (pkexec and
    polkit-agent-helper-1).
  + Add autoconf, automake and libtool BuildRequires, and call
    autoreconf, for the new patch.
  + Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build.
  + Pass --with-pic to configure instead of changing CFLAGS to
    contain -fPIC.</changelog>
<changelog author="vuntz@opensuse.org" date="1339588800">- Package /etc/polkit-1/localauthority and its subdirectories. They
  were forgotten because they were empty, but people might need
  them to put .pkla files.</changelog>
<changelog author="meissner@suse.com" date="1345636800">- also use -z now for binary hardening</changelog>
<changelog author="vuntz@opensuse.org" date="1347624000">- Update to version 0.107:
  + Try harder to look up the right localization
  + Introduce a polkit.Result enumeration for authorization rules
  + pkexec: add support for argv1 annotation and mention
    shebang-wrappers
  + doc: update guidance on situations where there is no polkit
    authority
- Changes from version 0.106:
  + Major change: switch from .pkla files (keyfile-format) to
    .rules files (JavaScript)
  + Nuke polkitbackend library, localauthority backend and
    extension system
  + Run polkitd as an unprivileged user
  + Add a systemd .service file
  + Several other code changes.
  + Updated documentation.
- Changes from version 0.105:
  + Add pkttyagent(1) helper
  + Make it possible to influence agent registration with an a{sv}
    parameter
  + Several other code changes.
- Add pkgconfig(mozjs185) BuildRequires: new dependency for the
  authority backend.
- Rebase polkit-no-wheel-group.patch: the admin configuration is
  now in a .rules file.
- Rebase polkit-suid_flags.patch.
- Explicitly pass --enable-libsystemd-login or
  - -disable-libsystemd-login, depending on whether we build systemd
  support.
- Add a %pre script to create the polkitd group and user, as
  polkitd now run as an unprivileged user.</changelog>
<changelog author="vuntz@opensuse.org" date="1348574400">- Use %{_localstatedir}/lib/polkit for $HOME of polkit user,
  instead of %{_libexecdir}/polkit-1. The directory is manually
  created in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1348747200">- Add polkit-no-systemd.patch: this patch, only applied when not
  building systemd support, removes the systemd service reference
  from the dbus .service file. This is needed as the systemd
  .service file does not get installed in that case and dbus gets
  confused because it expects it.
- Make %{_datadir}/polkit-1/rules.d and
  %{_sysconfdir}/polkit-1/rules.d owned by user polkitd, as those
  directories have 0700 as permissions.
- Those two changes should fix polkit so it can start.
  Fix bnc#782395.</changelog>
<changelog author="aj@suse.de" date="1352376000">- Add pwdutils to prereq for groupadd and useradd.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Enable systemd inetegration (change with_systemd to 1): As an
  agreed target for 12.3, systemd integration will be enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 0.108:
  + PolkitAgent: Avoid crashing if initializing the server object
    fails
  + Fall back to authenticating as uid 0 if the list of admin
    identities is empty
  + Dynamically load libmozjs185.so and cope with it not being
    available
  + docs: mention the audience for authorization rules
  + build: Fix .gir generation for parallel make
- Only conditionally Require ConsoleKit when with_systemd is 0:
  systemd support obsoletes ConsoleKit.
- Add polkit-link-gmodule.patch: Link against gmodule-2.0.
- Change libpolkit0 to require polkit &gt;= %version instead of the
  exact version. This will ease upgrade problems should there ever
  be a soname bump of libpolkit0.</changelog>
<changelog author="dimstar@opensuse.org" date="1355140800">- Add polkit-libmozjs.patch: dlopen libmozjs185.so.1.0 instead of
  libmozjs185.so, which is packaged in the -devel package
  (bnc#793562)</changelog>
<changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
<changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
<changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
<changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
<changelog author="meissner@suse.com" date="1443787200">- polkit 0.113 update
  * Fixes CVE-2015-4625, a local privilege escalation due to predictable
    authentication session cookie values. Thanks to Tavis Ormandy, Google Project
    Zero for reporting this issue. For the future, authentication agents are
    encouraged to use PolkitAgentSession instead of using the D-Bus agent response
    API directly. (bsc#935119)
  * Fixes CVE-2015-3256, various memory corruption vulnerabilities in use of the
    JavaScript interpreter, possibly leading to local privilege escalation.
    (bsc#943816)
  * Fixes CVE-2015-3255, a memory corruption vulnerability in handling duplicate
    action IDs, possibly leading to local privilege escalation. Thanks to
    Laurent Bigonville for reporting this issue. (bsc#939246)
  * Fixes CVE-2015-3218, which allowed any local user to crash polkitd. Thanks to
    Tavis Ormandy, Google Project Zero, for reporting this issue. (bsc#933922)
  * On systemd-213 and later, the "active" state is shared across all sessions of
    an user, instead of being tracked separately.
  * pkexec, when not given a program to execute, runs the users shell by
    default.
- Fixed shutdown problems on powerpc64le bsc#950114</changelog>

</package>
<package pkgid="2d19f1e40ddfe43365e8b0bd561e7c57013575f53c32223558d4b9e3195192b8" name="util-linux" arch="src">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="5f85161de1d7299e2516dc5f2d2040ac43a661ddadccd86790b59c4c29b392bf" name="util-linux" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="3672be49c424abc8cb6e692ce0d812c5b0fa6819232b48e8829b29a9387bab49" name="util-linux-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="f6658dc190748f8c7d0f2aa4cbabc0d09bfebbd8f752259ec63bb53edfbbf91d" name="util-linux-debugsource" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="d437ae6d50318bdcd99fa9b2c89256a632ab2c50c99f5e002d01c760f5020bf2" name="util-linux-lang" arch="noarch">
    <version epoch="0" ver="2.25" rel="9.4"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="1cc7d8f401f40f560a70a8ab3f858a1688665d432773afe3ae0c4b2d62b41cdd" name="util-linux-systemd" arch="src">
    <version epoch="0" ver="2.25" rel="9.1"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="d04940ed1ab26b7fa3e8ed7a427150c820b4c3b5021e29ac0e2037a86a6679a5" name="util-linux-systemd" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.1"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="4fef96bac5baa012a819e8757dc3786488d57224708fb9577d31156dc446134f" name="util-linux-systemd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.1"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="793f9c15204fde396fa57cd8b355929339fb3754fdc3aadd8586b84a6b265fff" name="util-linux-systemd-debugsource" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.1"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="e293bdefc39dcee218f9623d6adcabfefaec8e49464c29524c685898cff17b19" name="uuidd" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.1"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="f42e18b0c52d80d4015898ef3b8d4aa1e687df5048125a866f806ccd1ac0fa98" name="uuidd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="9.1"/>

<changelog author="pgajdos@suse.com" date="1410955200">- do not abort when fdisk -l when device cannot be opened
  [bnc#886790], [bnc#893712], [bnc#890351]</changelog>
<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>

</package>
<package pkgid="96379296816a2b18f54135501bc89a616d7d8cae63dac6192f6d096abe7d442a" name="vim-plugin-conky" arch="x86_64">
    <version epoch="0" ver="1.10.0" rel="3.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1241352000">- update to 1.7.0</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244548800">- update to 1.7.1</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1244894400">- update to 1.7.1.1:
  * fixed a regression which causes fonts to not be rendered properly with
    certain types of windows
  * fix bug in comments within TEXT (where the line contains just '#') (sf.net
    [#2803586])
  * fix bug in $mails (sf.net #2802529)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1254312000">- update to 1.7.2:
  * fixed minor memleak in pop3/imap code on config reload
  * fix crash when using $if_match with objects that may return a null pointer
    (like $rss, $weather, or $curl before data is available)
  * removed alias config option due to brokenness
  * changed xoap parsing method to xpath, in preparation to include forecast
    data
  * update MPD elapsed/progress when stopped (sf.net #2792113)
  * overhauled RSS and weather, added $curl
  * added support for X alignment across multi-lined objects (i.e., using
    $alignr with $exec)
  * www.weather.com can now be used as well as a source of weather dataµ
  * added support for $desktop, $desktop_number and $desktop_name (sf.net
    [#2040528])
  * added support for $swapfree
  * improved Lua API (lua_read_parse has been removed in favour of the
    conky_parse() Lua API call)
  * introduced new Lua Cairo and Imlib2 bindings
  * added support for $weather (experimental)
  * remove newline with comment only lines in TEXT
  * improved parsing of graph arguments, removed "log"|"normal" arguments in
    favour of -l switch
  * fix escaping of comments in TEXT (sf.net #2813390)
  * fix segfault in to_real_path, it's sometimes called with the same source
    and dest without checking the length, causing a segfault
  * use the internal process list for if_running on Linux</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1278244800">- update to 1.8.0
- split out -doc subpackage
- package vim and nano syntax highlighting configuration files into subpackages
  (instead of packaging them under the docdir)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1286539200">- dropped conky-getaddrinfo.patch, was merged upstream
  (PATCH-FIX-OPENSUSE conky-getaddrinfo.patch fix-for-opensuse-specific-things.patch sf#3045085 pascal.bleser@opensuse.org)
- update to 1.8.1:
  * allow method to pass execgraph arguments containing spaces
  * abort curl transfers if they drop below 1000B/s for more than 60s
  * fix short_units for below kilo values
  * when we have a failure in mail thread, sleep for a bit
  * improve failure handling in mail threads
  * when we have a failure in the mail thread, lookup the hostname again in
    case the failure is due odd to DNS changes, or some other madness
  * fix segfault in ccurl_thread.c
  * fix crash in mail stuff due to bad free()
  * fix segfault in i8k (sf.net #3007167)
  * use getaddrinfo instead of gethostbyname: patches conky to use getaddrinfo
    instead of gethostbyname everywhere. gethostbyname is rather flawed and
    doesn't support IPv6 properly. Patch contributed by Pascal Bleser.
  * fix 'nvidia with ncurses segfaults' (sf.net #3006233)
  * make $fs_used_perc and $fs_bar report used space correctly; they reported
    fs-&gt;size - fs-&gt;avail, which is not correct if fs has super-user reserved
    blocks; note that now $fs_used_perc and $fs_free_perc need not add up to
    100%, but that is consistent with what $fs_used and $fs_free do
  * fix buffer overflows in eve.c (sf.net #3034056)
  * fix bug where IMAP doesn't refresh counts after IDLE timeout
  * fix segfault in mail folder (SF: 3007493)
  * fix alignment ($align[rc]) issue for exec &amp; lua objects
  * small build fix &amp; zero playtime and progress bars when XMMS2 playback is stopped
  * fix tiny memleak when $top is used wrong
  * ${top}, ${top_mem} and ${top_time} are now recognized as variables; the
    parts of code doing this were in a #ifdef __linux__; the total CPU time of
    processes (${top} with "time" argument) is now printable, and ${top_time}
    works
  * fix battery_bar not parsing arguments correctly (sf: #2998034, lp: #569195)
  * bugfix: RSS interval was in secs instead of mins
  * bugfix: $alignr only worked on the first line of $execp, $execpi, $lua and $lua_parse
  * bugfix: memory and thread-deleting problems
  * bugfix: read_tcp treated a succesfull connection as failed and vice versa
  * add $nodename_short
  * bugfix: adding/removing use_xft in the config had no effect unless you
    restarted conky, reloading the config was not enough
  * fix building with Audacious &gt;= 2.3
  * bugfix: mixerbar showed wrong values
  * bugfix: ac-adapter is sometimes called ADP1 in sysfs instead of AC
  * bugfix: battery_bar should also work without argument
  * bugfix: When the first line behind TEXT was a comment, the start of the
    second line wasn't parsed
  * fix X error when border_width is &lt;1
  * fix device name parsing for diskio variables
  * fix bug in $if_existing</changelog>
<changelog author="nmarques@opensuse.org" date="1317038400">- Add conky-fix-curl-FTBFS.patch: remove deprecated curl/types.h
  to fix FTBFS with newer versions of curl.
  Upstream: http://tinyurl.com/4x76bbx</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317038401">- fix build issue with files in conky-doc</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1317297600">- add cairo and imlib support where tolua++ is available,
  built as subpackages (conky-cairo and conky-imlib2)
- add patch to add -lm when linking against libiw, which is required by some
  more recent versions of libiw</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="coolo@suse.com" date="1327924800">- use lua51 on factory</changelog>
<changelog author="cfarrell@suse.com" date="1330516800">- license update: GPL-3.0+
  See the COPYING file</changelog>
<changelog author="toganm@opensuse.org" date="1340280000">- Update to 1.9.0 for changes please see
  http://conky.sourceforge.net/changelog.html
  * reworked conky-libiw_with_libm.patch as conky-1.9.0-libiw_with_libm.patch
  * removed conky-fix-curl-FTBFS.patch as fixed by upstream</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1350820800">- merged back with my changes for SLES build compatibility</changelog>
<changelog author="i@marguerite.su" date="1352462400">- merged PMBS changes here. enabled more options.(OBS compatible)
- add dependency imlib2-loaders for conky-imlib2.
  or conky will keep warning can't load images.
- add two patches from debian which also confirmed by user
  please_try_again.
  * fix-apcupsd.patch, revert broken apcupsd code to previous
    working version.
  * fix-CVE-2011-3616.patch. avoid rewriting an arbitrary user file
    already upstreamed. but not in 1.9.0. remove next release.</changelog>
<changelog author="aloisio@gmx.com" date="1421409600">- Merged back changes for the packman section</changelog>
<changelog author="dgutu@suse.com" date="1432641600">- Removed conky-libiw_with_libm.patch because it's not used anywhere</changelog>
<changelog author="i@marguerite.su" date="1440849600">- update version 1.10.0
  * Partial rewrite in C++ (from C)
  * New Lua-based config system
  * New CMake-based build system
  * Support for newer GCC versions
- drop patch: conky-1.9.0-libiw_with_libm.patch
  * upstream changed from autotools to cmake
- drop patch: fix-CVE-2011-3616.patch, upstreamed
- drop patch: fix-apcupsd.patch.
  * problematic, invalid conversion from void* to int*
- add patch: conky-1.10.0-libircclient.patch
  * fix includedir
- add patch: conky-1.10.0-libdir.patch
  * respect LIB_INSTALL_DIR
- remove old-time conditional checks:
  * lua/imlib2 are always enabled
- drop conky-cairo/imlib2 sub-packages
  * they're always enabled, no need to split
  * add Provides/Obsoletes in main package
- rename conky-vim/nano sub-packages to vim/nano-plugin-conky
- remove pseudo sub-packages:
  * there are more "features" now, we can not create more and more
    dummy packages
  * keeping packages from being switched among repositories should
    be done by users via package management system, not this way
  * add Provides/Obsoletes in main package
- drop conky-rpmlintrc
  * the error it filtered doesn't exist anymore
- drop conky.desktop
  * conky is not a desktop application. a desktop file is useless</changelog>
<changelog author="i@marguerite.su" date="1443873600">- fix /usr/bin/lua51, it's now /usr/bin/lua5.1 in TW.</changelog>
<changelog author="dimstar@opensuse.org" date="1446120000">- Also use /usr/bin/lua5.1 on Leap 42.1 (boo#952599).</changelog>

</package>
<package pkgid="c57b12002a8bd8ae460263255410dcd615ffdf3b5966a0535e1cac4dbfe11d66" name="virtualbox" arch="src">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="2990ce1212fc11854e57a2c680937203eb2074919eefe1c9971c46b8a3caa461" name="virtualbox" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="9b52e1ea2d4326bb3b45c6b51d5a70a1f8fae6aca37c7357a2822cc295e320c8" name="virtualbox-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="015216f825358123319f7a61858ac89057cb00988fd8237045b6572e4b2cac7a" name="virtualbox-debugsource" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="352bce7d51de396bfa24dbeb3115ad502b05766db6d2e9340096b1ab791b8f94" name="virtualbox-devel" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="e424d504b2fb282f9b19ea1cb8656fb0559cf62782cd1b3f1a66d6aebfcbefec" name="virtualbox-guest-desktop-icons" arch="noarch">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="565f09b02ae2c9cba3ed9f34bd51b515a21d16af1f8ca4848c7a1272c1df8a3e" name="virtualbox-guest-kmp-default" arch="x86_64">
    <version epoch="0" ver="5.0.8_k4.1.12_1" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="f444ab3fb949c5f58b06ca55afd3014146b662246e142a285c9d6922b4c6c5ef" name="virtualbox-guest-kmp-default-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8_k4.1.12_1" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="eddb43013eb795fe2145d60bda1f7332aba112a922ebfe9684d840b31e1c2583" name="virtualbox-guest-tools" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="9b59bbf38290d3ddc19cda3cdbddfb33e537f7dd0c34c3b57137b67a6e908bf5" name="virtualbox-guest-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="d616cf223a5d9dfb8bc7f3a5d386f51337de4ef0df71acd4b523ead2755b0c4b" name="virtualbox-guest-x11" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="0200e28d73fbf0dae1479ae090805860aef1c3fbcacf9ea9a9db5acddf00de4f" name="virtualbox-guest-x11-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="72f9e3c10e65d0fa4f6054d91a221e353dd6a2e87da6dc224a23f256e95868bb" name="virtualbox-host-kmp-default" arch="x86_64">
    <version epoch="0" ver="5.0.8_k4.1.12_1" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="35516abdececff30abe8aad06c95edb806d60ebdac277cde4abef910f3d015bd" name="virtualbox-host-kmp-default-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8_k4.1.12_1" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="42c3e7300e68b05fdfe9053df3f6ed3f4ca463978a9a506d8a9c50a36a0e3248" name="virtualbox-host-source" arch="noarch">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="d688c7fe077b7c91aa37aaf800ee8af3f961f43ceb01cca50795c95141de4123" name="virtualbox-qt" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="e6a37fa0488400c529f6133522abdfae5190fb0298872169ce3d783e019f1876" name="virtualbox-qt-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="4d93428876d805ddbb9a7ea3ffb3c1f885feb203b72415ac49a65cac2e1e2a50" name="virtualbox-websrv" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="9ac7c19e26420885f4d03f6a4e8ac66add31c7ff3ffb72de504ffaad20425014" name="virtualbox-websrv-debuginfo" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="4.1"/>

<changelog author="tchvatal@suse.com" date="1430913600">- Create groups properly and also create vboxsf and vboxguest on
  guest additions bnc#927708</changelog>
<changelog author="bwiedemann@suse.com" date="1431259200">- Provide host-kmp src for use with custom kernels (bnc#925663)</changelog>
<changelog author="tchvatal@suse.com" date="1431691200">- Version bump to 4.3.28 bnc#935900 CVE-2015-3456:
  * VMM: fixed a Guru Meditation when rebooting certain guests (for example Solaris
    doing fast reboot) by fixing the implementation for INIT IPI
  * VMM: added some information for diagnosing rare VERR_VMX_INVALID_VMXON_PTR Guru
    Meditations (VT-x only)
  * GUI: HID LEDs sync: prevent synchronization if VM window has no focus (Windows
    and Mac OS X hosts only)
  * GUI: fixed drag and drop moving the cursor between guest screens on certain
    hosts
  * 3D: fixed a crash on restoring the VM state on X11 hosts (bug #12737)
  * 3D: fixed a crash on Linux guest shutdown (bug #12772)
  * VRDP: fixed incompatibility with rdesktop 1.8.3
  * VRDP: fixed listening for IPv6 on some systems (bug #14038)
  * Storage: don't crash if creating an asynchronous I/O context fails (e.g. when
    starting many VMs) and show a proper error message
  * Floppy: several fixes
  * Audio: improved the behavior of the volume control for the HD audio device
    emulation
  * USB: increase the number of supported drivers from 3 to 5 (Windows hosts only)
  * PS/2 keyboard: synchronize the LED state on VM restore (Windows and Mac OS X
    hosts only)
  * NAT Network: when running multiple NAT networks with multiple VMs, only stop
    the respective services when stopping VMs (bug #14090)
  * NAT: don't kill UDP bindings on ICMP errors (bug #13475)
  * NAT: bandwidth limit now works properly with NAT (bug #11485)
  * BIOS: fixed the returned size value of the VBE 2.0 PMI function 0Ah (4.2.0
    regression; bug #14096)
  * Guest Control: fixed parameter quoting in Windows guests (bug #13157)
  * Webcam passthrough improvements for Linux (V4L2) hosts to support more webcam
    models
  * API: don't fail starting a VM with VBOX_E_INVALID_OBJECT_STATE under certain
    conditions (bug #13617)
  * API: be more verbose on VBOX_E_INVALID_OBJECT_STATE if a medium is attached to
    a running VM (bug #13560)
  * API: fixed a bug which could result in losing certain screen resize events with
    multi-monitor guests
  * rdesktop-vrdp: fixed path to the keymaps (bug #12066)
  * rdesktop-vrdp: switch to version 1.8.3
  * Windows hosts: more hardening fixes (e.g. bugs #14051, #14052)
  * Linux hosts: another fix for activated SMAP on Linux 3.19 and newer (Broadwell
    and later; bug #13961)
  * Linux hosts: Linux 4.1 compile fix (bug #14081)
  * Solaris hosts: fixed using of VNIC templates with Crossbow based bridged
    networking to be compatible with vanity interface names
  * Mac OS X hosts: fixed crash during VM termination under rare circumstances
  * Windows Additions/WDDM: improved video memory utilization and allow more/bigger
    guest screens with large resolutions (including HiDPI)
  * X11 Additions: prevent flickering when updating mouse cursor
  * Solaris Additions: fixed incorrect usage of 'prtconf' while installing Guest
    Additions (Solaris 10 only)
- Refresh patch:
  * vbox-vboxadd-init-script.diff</changelog>
<changelog author="mpluskal@suse.com" date="1432036800">- Add smap.diff (boo#931461)</changelog>
<changelog author="jslaby@suse.com" date="1432728000">- initial gcc5 support (it builds at least)
  * added: gcc5-support.patch (upstream)
  * added: gcc51-support.patch (upstream)
  * added: gcc5-real-support.patch</changelog>
<changelog author="tchvatal@suse.com" date="1433851200">- Disable multiversion_kernel support, taken from nvidia driver spec,
  should fix bnc#925663.</changelog>
<changelog author="mpluskal@suse.com" date="1434110400">- Enable building of for all supported kernel flavours
  * exclude also pv flavour</changelog>
<changelog author="alarrosa@suse.com" date="1436184000">- Exclude %ix86 arch in suse_version == 1315 (openSUSE 42)</changelog>
<changelog author="tchvatal@suse.com" date="1436616000">- Version bump to 5.0.0:
  * Major bump from 4 series with tons of changes.
  * Read upstream changelog for in-depth informations
- Obsoleted patches:
  * gcc5-support.patch
  * gcc51-support.patch
- Refreshed patches:
  * gcc5-real-support.patch
  * vbox-disable-updates.diff
  * virtualbox-system-x.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436616001">- Fix vbox build by replacing non-existent sed parameter:
  * virtualbox-sed-params.patch</changelog>
<changelog author="tchvatal@suse.com" date="1436875200">- Fix buffer overflow on dtrace lib:
  * virtualbox-snpritnf-buffer-overflow.patch
- Note: still does not respect cxxflags</changelog>
<changelog author="tchvatal@suse.com" date="1436961600">- Install more binaries that were in bin generated folder</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1439553600">Version bump to 5.0.2 (released 2015-08-13 by Oracle)
  A number of problems were fixed and/or added. In particular, the artifically high load average
  problem reported as bsc#939299 has been fixed. The complete list follows:
    VMM: added support for guest crash report MSRs with Hyper-V paravirtualization
    VMM: fixed an issue causing artifically high load averages on Linux hosts
    VMM: fixed a kernel panic with thread-context hooks caused by incompatible changes made to Linux 4.2 kernels
    VMM: fixed a saved state issue with VT-x/AMD-V disabled (5.0 regression; bug #14304)
    VMM: fixed VERR_SUPDRV_TSC_DELTA_MEASUREMENT_FAILED Guru Meditations on certain AMD CPUs (5.0 regression; bug #14370)
    VMM: fixed a crash while creating a guest core dumps via the VM debug facility (5.0 regression)
    VMM: This release has AVX2 passthrough disabled on every host and AVX passthrough disabled for 64-bit VMs on 32-bit hosts.
  This will be properly fixed in a future 5.0.x maintenance release (see e.g. bug #14262).
    GUI: fixed rare hang and crash on VM shutdown/poweroff
    GUI: X11: fixed few crashes caused by the Qt alien widgets feature
    GUI: X11: fixed various mini-toolbar geometry quirks like positioning, z-order, transiency issues on certain window managers (bug #14257)
    GUI: X11: fixed mini-toolbar minimize button issue under certain window managers (bug #14284)
    GUI: VM menu actions availability should now be properly updated on full-screen/seamless/scaled mode switches
    GUI: disk encryption password validation should be performed when user confirmed the password, not after each entered symbol
    GUI: do not change the VM/group selection in the VM Manager to the newly created VM if it was created by another client (e.g. VBoxManage)
    GUI: improve the quality in scaled mode under some circumstances (5.0 regression; bug #14303)
    VBoxManage: do not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VRDP: allow Windows 10 RDP clients (bug #14216)
    Audio: fix a possible crash on VM process termination (5.0 regression)
    Storage: improved raw disk access on OS X by unmounting any accessed volume before first use and prevent any mount attempt by the host (bug #14219)
    3D: basic support for saving/restoring display lists
    Shared Folders: fixed a problem with accessing CIFS shares (bug #14252)
    Shared Folders: improved path conversion between hosts and guests with different path separators (bug #14153)
    API: skip resetting of immutable media when the VM in saved state is started (bug #13957)
    API: fixed method for setting medium IDs which used zero (invalid) UUIDs instead random (valid) UUIDs if no UUIDs were passed (bug #14350)
    API: for Windows host fix detection of API client crashes which have a session open
    OVF: properly export all VBox features including the setting for paravirtualization (bug #14390)
    Linux hosts: more fixes for activated SMAP on Linux 3.19 and newer (Broadwell and later; bug #13961)
    Linux hosts: check then name space before attaching to a host network interface (bug #13795)
    Linux Additions: Linux 4.2 fixes (bug #14227)
    Linux Additions: improved the performance of stat() to speed up certain file operations on shared folders
    X11 Additions: various seamless mode fixes, including invisible windows under LXDE. -</changelog>
<changelog author="wbauer@tmo.at" date="1441108800">- Install and enable the vboxadd-service init script, to make
  auto-mounting of shared folders and time synchronization work
- Install VBoxService to /usr/sbin/ instead of /usr/bin/ so that
  vboxadd-service can find it, it cannot be run as user anyway
- Create the /media folder with appropriate permissions on
  distributions higher than 13.1, it doesn't exist any more and the
  one that VBoxService creates automatically cannot be accessed by
  normal users
- Fixes boo#908669 and boo#936254</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441713600">Version bump to 5.0.4 (released 2015-09-08 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: fixed an issue with Windows 10 guest kernel debugging over the network for Hyper-V paravirtualized VMs
    VMM: fixed a bug which prevented reading the saved state of the 'PATM' unit from VirtualBox 4.3.x (bug #14512)
    GUI: changed default OS type for Windows from Windows XP to Windows 7
    GUI: added another pre-defined guest screen resolution (bug #14384)
    GUI: fixed update check which was broken due to changing the location of the root certificates (bug #13096)
    GUI: fixed issues with synchronization of Caps lock / Num lock / Scroll lock on Windows hosts (bug #14302)
    GUI: don't crash during VM shutdown if 2D video acceleration and 3D support are enabled (Mac OS X hosts only)
    GUI: several seamless fixes for certain X11 window managers, also when used in multi-screen setups
    GUI: Log window size, position and cursor-position fixes
    Audio: fixed playing leftover/deprecated audio samples
    Audio: fixed playing audio after suspending the host (5.0 regression; Linux hosts using the ALSA backend)
    Audio: fixed playing short audio samples which were chopped off formerly
    Audio: fixed distortions on OS X when the sample rate of the guest stream and host device don't match
    Storage: fixed raw disk access and flat VMDK image access which would be always opened readonly (5.0.2 regression; bugs #14425, #14461)
    Storage: fixed initial encryption of VDI images after they were compacted (bug #14496)
    VGA: fix for certain graphics modes (bug #14516)
    NAT: don't freeze while the VM is paused if the network attachment mode is changed from/to NAT with activated port forwarding
    OVF: fixed duplicate USB controller entries in exported OVA/OVF (bug #14462)
    Shared Folders: fixed a path separator issue (bug #14434)
    Drag and drop: fixed crashes on OS X hosts when doing host-to-guest transfers
    VBoxManage: another attempt to not deny changing the network adapter type at VM runtime (5.0 regression; bug #14308)
    VBoxManage: fixed broken guestcontrol &lt;VM-Name&gt; list command (5.0 regression)
    VBoxManage: fixed broken Guest Control stdout/stderr output (5.0 regression)
    Mac OS X hosts: fixed remaining problems with activated SMAP (Broadwell and later; bug #14412)
    Mac OS X hosts: fixed broken 3D support (5.0.2 regression; bug #14476)
    Linux hosts: Linux 4.2 fix
    Linux hosts: don't crash on older Linux distributions if the DBus service isn't running (bug #14543)
    Windows hosts: fixed the VERR_LDR_MISMATCH_NATIVE error message (bug #14420)
    Windows hosts: fix for Windows 10 build 10525 and later (bug #14502)
    Windows hosts: fixed network adapter enumeration on Windows 10 (bug #14437)
    Windows hosts: prevent intermittent host network disconnects during VM start/shutdown with bridged networking (bug #14500)
    Windows Additions: fixed the call to the memory allocation function (bug #14415)
    Linux Additions: be more forgiving if the compilation of the vboxvideo module fails (bug #14547)
    X11 Additions: fixed a number of small issues with dynamic resizing and full-screen and seamless modes.</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1441972800">- The code base released by Oracle failed to build on 32-bit systems. They had already fixed the
  problem. This update applies their solution using patch file vbox-32bit-build-error.diff.</changelog>
<changelog author="dimstar@opensuse.org" date="1443787200">- BuildRequire pkgconfig(udev) instead of udev directly: this allows
  us to be earlier in the build phase, as we can make use of udev-mini
  and it solves build failures with systemd224.</changelog>
<changelog author="idonmez@suse.com" date="1444046400">- Version bump to 5.0.6 (released 2015-10-02 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  GUI: the update check now uses the HTTP system proxy settings by default
  GUI: About dialog improvements. Copyable version text, do not close dialog on mouse-clicks and focus losing, explicit close button at the bottom of dialog and disabled close button fix on OS X. (bugs #9912, #12749)
  GUI: fixed bug when re-assigning shortcuts (bug #14565)
  GUI: fixed default focus button in message-box dialogs (bug #14486)
  GUI: fixed settings dialog which is opened if the network settings need to be changed at VM startup (5.0.0 regression; bug #14601)
  GUI: fixed crash during VM start if an early error message needs to be shown, for example Linux kernel modules not present (bug #14646)
  Bridged Networking: fixed handling of guest DHCP requests without UDP checksum when bridging to a wireless interface (bug #14615)
  Audio: latency fixes (Windows hosts only; bug #4088)
  Guest Control: correctly set USERNAME and USERPROFILE environment variables (Windows guests only)
  Guest Control: several fixes
  API: properly restore NAT port forwarding rules when reverting to a snapshot
  Parallel ports: Several fixes allowing to enable two parallel ports for a VM
  VBoxManage: fixed wrong output of debugvm show command
  VBoxManage: fixed hang when specifying logging groups with debugvm log starting with h, for example hex
  Windows hosts: renamed VBoxStartup.log to VBoxHardening.log and provide this log file in the GUI log viewer
  Windows hosts: fixed a small memory leak in the Windows host interface driver (VBoxNetAdp) which caused a BSOD if the driver verifier is enabled (bug #14562)
  Windows hosts: fixed a failure to start VMs on hosts where dsound.dll is not available (bug #14574)
  Windows hosts: another fix for VERR_LDR_MISMATCH_NATIVE errors (bug #14579)
  Windows hosts: fixed host-to-guest communication with bridged networking (bugs #14326, #14457)
  Windows hosts: fixed broken data receiving from the serial device with the named pipe backend if Kaspersky AV is installed
  Linux hosts: Linux 4.3 compile fixes
  Linux hosts: installer fix for certain systems (bug #14627)
  Linux hosts / guests: native systemd support for the host/guest installer scripts. The scripts for re-compiling the kernel modules are now located at /sbin/rcvboxdrv (host) and /sbin/rcvboxadd (Guest Additions)
  Mac OS X hosts: GUI-related fixes for El Capitan
  Mac OS X hosts: fixed a problem with capturing USB devices under El Capitan
  Mac OS X hosts: allow colon character on shared folders (bug #14554)
  Linux Additions: properly set the VBoxService process ID in the PID file (bug #14571)
  Linux Additions: Guest Control fixes (bug #14573)
  Windows Additions: fixed shutting down VBoxTray when running with older VirtualBox host versions
  Windows Additions: fixed video playback with VLC and Windows Media Player when the WDDM driver is used and 3D is not used
  Windows Additions: prevent a possible VLC crash when the WDDM driver is used and 3D is enabled by implementing YV12 surfaces
- Drop vbox-32bit-build-error.diff, fixed upstream
- Updated UserManual.pdf</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811200">- Add logic to virtualbox-wrapper.sh to test if /etc/udev/rules.d/60-vboxdrv.rules exists. If not, a screen stating
  that passthru of USB devices is a security hole, and it refers the user to bnc#664520 for an explanation.
  It also explains the process for enabling USB passthru if the user really wants it. When the user closes
  the popup window, a dummy version of /etc/udev/rules.d/60-vboxdrv.rules is created, which prevents this
  window from being displayed every time VirtualBox is started.
- Fixes boo#953018.
- Version bump to 5.0.8 (released 2015-10-20 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    GUI: Mac OS X: Restore green zoom button for VM windows (it was hidden in the previous release to avoid native full-screen issues). For Yosemite and El Capitan this button should work accordingly to the Apple HIG: Full-screen by default, maximize if the user holds the Option key.
    Serial ports: fixed wrong IRQ number for the first serial port in the ACPI tables (5.0.6 regression; bug #14659)
    API: fixed a 5.0 regression in VBoxManage setproperty defaultfrontend (bug #14696)
    VBoxManage/vbox-img: conversion to RAW images could result in a disk image containing all zeroes
    Linux hosts: several fixes for systemd integration in .deb / .rpm packages (e.g. bug #14665). The command for recompiling the host kernel modules was changed to /sbin/vboxconfig
    Linux hosts: make host-only interfaces report operstate UP only when they have VMs attached (bug #14526)
    Mac OS X hosts: fix bpf capture and accounting of traffic on bridged and host-only interfaces (bug #14553)
    Windows guests: fixed 3D rendering issues on high resolution displays
    Windows Additions: fixed problems with 3D acceleration on Windows hosts with Intel HD graphics (bug #14670)
    Linux Additions: fix service starting on Debian systems with systemd installed but not in use (bug #14683)</changelog>
<changelog author="Larry.Finger@lwfinger.net" date="1446811201">- Fixed typo in QMessageBox text in new popup window.</changelog>

</package>
<package pkgid="00e4f27d85430fdabf8905c7b3fd6e7ad9ccb4d65828665b411d79456a8d6592" name="wireshark" arch="src">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="957770007ebec26bd6d0e25a3ae5eba2e54515dad8a50280fa191d8ee64222b2" name="wireshark" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="8a2df858855d295126956d1e441ae3da79b3ba778d9655679ed93752ad6c3885" name="wireshark-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="5699b8986d2e920c5b96d644bb2ab381a06bf5ee056001af5e183e55754cf9fa" name="wireshark-debugsource" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="1b90cc2a7968a3390c4924ca734f8bda022523941e2457feddf80d62b938c82d" name="wireshark-devel" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="e6a853b3504eb12e79ace19db7cda0022a6e71d5ebd5a881130ae7571d0939e5" name="wireshark-ui-gtk" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="335dd6fcbab5bf3924b26ea80b95306fa3db09abf8625a0e4d82cec051d83fc3" name="wireshark-ui-gtk-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="956f7dc5e37f5fbf8551f426884f1d635431cc5d8c484df33a44a704d533b07f" name="wireshark-ui-qt" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="66566a8d171f0d2d15cbb3172c1b373a07ea525b8b08f67d08aaa31bf63736e3" name="wireshark-ui-qt-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.12.8" rel="9.1"/>

<changelog author="andreas.stieger@gmx.de" date="1407931200">- Wireshark 1.12.0
- new and updated features since 1.10:
  * When manipulating packets with editcap using the -C
    &lt;choplen&gt; and/or -s &lt;snaplen&gt; options, it is now possible
    to also adjust the original frame length using the -L
    option.
  * You can now pass the -C &lt;choplen&gt; option to editcap
    multiple times, which allows you to chop bytes from the
    beginning of a packet as well as at the end of a packet in
    a single step.
  * You can now specify an optional offset to the -C option for
    editcap, which allows you to start chopping from that
    offset instead of from the absolute packet beginning or
    end.
  * "malformed" display filter has been renamed to
    "_ws.malformed". A handful of other filters have been given
    the "_ws." prefix to note they are Wireshark application
    specific filters and not dissector filters.
  * The Kerberos dissector has been replaced with an auto
    generated one from ASN1 protocol description, changing a
    lot of filter names.
  * Transport name resolution is now disabled by default.
  * Dissector output may be encoded as UTF-8. This includes
    TShark output.
- New and updated protocol and capture file support as listed in
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.0.html
- major API changes
- packaging changes:
  * build with GTK+ 3 for openSUSE, GTK+ 2 on SLE 11
  * disable building wireshark-qt
  * refreshed patches:
    wireshark-1.2.0-geoip.patch for context changes
    wireshark-1.2.0-disable-warning-dialog.patch, same
    wireshark-1.10.0-authors-pod2man.patch, same</changelog>
<changelog author="andreas.stieger@gmx.de" date="1408276800">- Build experimental UI wireshark-qt:
  * add wireshark-1.12.0-qt-QFont-stylename.patch
    to support building with Qt 4.6 on SLE 11
  * split UI into wireshark-ui-gtk and wireshark-ui-qt to reduce
    dependencies, one of which is required by the main package
- remove unknown configure option --with-python</changelog>
<changelog author="crrodriguez@opensuse.org" date="1410782400">- Current versions support lua 5.2, so just use "lua-devel"
  in BuildRequires.
- Enable verbose build, rpmlint counts on that.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955200">- Wireshark 1.12.1 [bnc#897055]
- The following vulnerabilities have been fixed.
  * MEGACO dissector infinite loop
    wnpa-sec-2014-13 CVE-2014-6423
  * Netflow dissector crash
    wnpa-sec-2014-14 CVE-2014-6424
  * CUPS dissector crash
    wnpa-sec-2014-15 CVE-2014-6425
  * HIP dissector infinite loop
    wnpa-sec-2014-16 CVE-2014-6426
  * RTSP dissector crash
    wnpa-sec-2014-17 CVE-2014-6427
  * SES dissector crash
    wnpa-sec-2014-18 CVE-2014-6428
  * Sniffer file parser crash
    wnpa-sec-2014-19 CVE-2014-6429 CVE-2014-6430 CVE-2014-6431
    CVE-2014-6432
- drop wireshark-1.12.0-qt-QFont-stylename.patch, upstream
- only build with --enable-gnutls where it has a compatible licence
  as configure check was changed from a warning to an error
  openSUSE 13.1 and up and SLE 11
- add a desktop file for the QT user interface
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.1.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1410955201">- install epan/wmem/*.h</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880000">- remove gpg-offline, now part of source-validator, also fixing
  SLE 12</changelog>
<changelog author="andreas.stieger@gmx.de" date="1415880001">- Wireshark 1.12.2
- The following vulnerabilities have been fixed.
  + SigComp UDVM buffer overflow
    wnpa-sec-2014-20 CVE-2014-8710 boo#905246
  + AMQP crash
    wnpa-sec-2014-21 CVE-2014-8711 boo#905245
  + NCP crashes
    wnpa-sec-2014-22 CVE-2014-8712 CVE-2014-8713 boo#905248
  + TN5250 infinite loops
    wnpa-sec-2014-23 CVE-2014-8714 boo#905247
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html</changelog>
<changelog author="andreas.stieger@gmx.de" date="1417608000">- Allow build with functions deprecated in gdk-pixbuf 2.31.2,
  fixing build for openSUSE Factory,
  add wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>
<changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
<changelog author="andreas.stieger@gmx.de" date="1420718400">- Wireshark 1.12.3
- The following vulnerabilities allowed Wireshark to be crashed by
  injecting a malformed packet onto the wire or by convincing someone
  to read a malformed packet trace file.
  + The WCCP dissector could crash
    wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 [boo#912365]
  + The LPP dissector could crash.
    wnpa-sec-2015-02 CVE-2015-0561 [boo#912368]
  + The DEC DNA Routing Protocol dissector could crash.
    wnpa-sec-2015-03 CVE-2015-0562 [boo#912369]
  + The SMTP dissector could crash.
    wnpa-sec-2015-04 CVE-2015-0563 [boo#912370]
  + Wireshark could crash while decypting TLS/SSL sessions.
    wnpa-sec-2015-05 CVE-2015-0564 [boo#912372]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.3.html</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Wireshark 1.12.4:
- The following security issues were fixed:
  * The ATN-CPDLC dissector could crash.
    wnpa-sec-2015-06 CVE-2015-2187 [bnc#920695]
  * The WCP dissector could crash.
    wnpa-sec-2015-07 CVE-2015-2188 [bnc#920696]
  * The pcapng file parser could crash.
    wnpa-sec-2015-08 CVE-2015-2189 [bnc#920697]
  * The LLDP dissector could crash.
    wnpa-sec-2015-09 CVE-2015-2190 [bnc#920698]
  * The TNEF dissector could go into an infinite loop.
    wnpa-sec-2015-10 CVE-2015-2191 [bnc#920699]
  * The SCSI OSD dissector could go into an infinite loop.
    wnpa-sec-2015-11 CVE-2015-2192 [bnc#920700]
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html</changelog>
<changelog author="dimstar@opensuse.org" date="1428580800">- Add wireshark-pkg-config.patch: actually install wireshark.pc,
  which is part of the tarball. Seems only cmake based setup
  handles this for upstream.
- Add wireshark.appdata.xml in order to show up in AppStream based
  appstores.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1430222400">- Build the qt frontend against QT5 in Factory (only).</changelog>
<changelog author="astieger@suse.com" date="1431518400">- Wireshark 1.12.5 [boo#930689]
- The following vulnerabilities have been fixed:
  * The LBMR dissector could go into an infinite loop.
    CVE-2015-3808 CVE-2015-3809 wnpa-sec-2015-12
  * The WebSocket dissector could recurse excessively.
    CVE-2015-3810 wnpa-sec-2015-13
  * The WCP dissector could crash while decompressing data.
    CVE-2015-3811 wnpa-sec-2015-14
  * The X11 dissector could leak memory.
    CVE-2015-3812 wnpa-sec-2015-15
  * The packet reassembly code could leak memory.
    CVE-2015-3813 wnpa-sec-2015-16
  * The IEEE 802.11 dissector could go into an infinite loop.
    CVE-2015-3814 wnpa-sec-2015-17
  * The Android Logcat file parser could crash.
    CVE-2015-3815 wnpa-sec-2015-18
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.5.html</changelog>
<changelog author="crrodriguez@opensuse.org" date="1432382400">- force -fPIC build to make QT5 happy.</changelog>
<changelog author="astieger@suse.com" date="1434628800">- Wireshark 1.12.6
- The following vulnerabilities have been fixed:
  * WCCP dissector crash
    CVE-2015-4651 wnpa-sec-2015-19 boo#935157
  * GSM DTAP dissector crash
    CVE-2015-4652 wnpa-sec-2015-20 boo#935158
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-1.12.6.html</changelog>
<changelog author="astieger@suse.com" date="1436788800">- Fix Factory with QT (PIE/PIC)
  adding wireshark-1.12.6-fix-QT-PIC-PIE.patch</changelog>
<changelog author="zaitor@opensuse.org" date="1438257600">- Conditionally set lua52-devel BuildRequires for openSUSE versions
  newer than 13.2. Wireshark does not compile with lua 5.3.</changelog>
<changelog author="astieger@suse.com" date="1439380800">- Wireshark 1.12.7 [boo#941500]
  The following vulnerabilities have been fixed:
  * Wireshark could crash when adding an item to the protocol tree.
    wnpa-sec-2015-21 CVE-2015-6241
  * Wireshark could attempt to free invalid memory.
    wnpa-sec-2015-22 CVE-2015-6242
  * Wireshark could crash when searching for a protocol dissector.
    wnpa-sec-2015-23 CVE-2015-6243
  * The ZigBee dissector could crash.
    wnpa-sec-2015-24 CVE-2015-6244
  * The GSM RLC/MAC dissector could go into an infinite loop.
    wnpa-sec-2015-25 CVE-2015-6245
  * The WaveAgent dissector could crash.
    wnpa-sec-2015-26 CVE-2015-6246
  * The OpenFlow dissector could go into an infinite loop.
    wnpa-sec-2015-27 CVE-2015-6247
  * Wireshark could crash due to invalid ptvcursor length checking.
    wnpa-sec-2015-28 CVE-2015-6248
  * The WCCP dissector could crash.
    wnpa-sec-2015-29 CVE-2015-6249
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.7.html</changelog>
<changelog author="astieger@suse.com" date="1444996800">- Wireshark 1.12.8 [boo#950437]
  The following vulnerabilities have been fixed:
  * pcapng file parser could crash while copying an interface filter.
    wnpa-sec-2015-30 CVE-2015-7830
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-1.12.8.html
- drop upstream wireshark-1.12.x-allow-gdk-pixbuf-deprecation.patch</changelog>

</package>
<package pkgid="8c5e2b389c01afad4fafff5fddbb8a161693a9d3699df65ebe58d984e0cb5079" name="xen" arch="src">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="b6b6bc0e01f54a507e45552d1ecb862c38278ac17ae8e1c9f214155df020e3ea" name="xen" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="ba93a6c30119544e9fcfe13fef84737fa380c5f3b2a8cdcb0fde9c2a3fa20220" name="xen-debugsource" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="b2b3d02e7a59844619a7b967071e1ecde9df8ec02789c3ae8ccfbce12739f993" name="xen-devel" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="dff2988869810b7fb5f6f5da2e44bfb7d317aff13414a1888dce914055e4e5f2" name="xen-doc-html" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="712aa716ee102d3082120e7ed580102cfb779130f3c43c6ca8a1ce72fbd06e91" name="xen-kmp-default" arch="x86_64">
    <version epoch="0" ver="4.5.1_12_k4.1.12_1" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="88442e8aae22632df10bbd8f9076e98940f1dc39290ee0817c366feec3368ae1" name="xen-kmp-default-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.5.1_12_k4.1.12_1" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="0967a579f3aee061bb01d1c16b4a7622a4e93efcda1fbc66fdcbdf74cf6c56cc" name="xen-libs" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="25a87469346d4d6dad01c65bc25429d9b592c43e40aec6dced7633d56e96000d" name="xen-libs-32bit" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="a0356512a5d2706fda6f41922ec1a67ea6afea968ded64ee72d490c6051704af" name="xen-libs-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="b6881156657c8f14ca2f4dbab41af2fef36a1662216c345a9b1449527cd863be" name="xen-libs-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="e3a0db33cb4ee111d4786f5a2e4d4c167984522672e5c4e4d517449e4029a520" name="xen-tools" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="fd17169a85fb78366467a36c62c4241622d3717a16b4b7282fac23c24f5d2793" name="xen-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="f1b409c606b34a4d3172c69734893b4ffc6d32e2689b310eaee10c9ae31e81cd" name="xen-tools-domU" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="b7e7d13dafeb9b2d45df5ea22758418b50c2c0485e5bb7b5ba85db83b34bf9b7" name="xen-tools-domU-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.5.1_12" rel="3.1"/>

<changelog author="ohering@suse.de" date="1436961600">- Remove xendomains.service from systemd preset file because it
  conflicts with libvirt-guests.service (bnc#937371)
  Its up to the admin to run systemctl enable xendomains.service</changelog>
<changelog author="carnold@suse.com" date="1437048000">- bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
  execution via IDE subsystem CD-ROM
  CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
  CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
  CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
  CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch</changelog>
<changelog author="ohering@suse.de" date="1437480000">- bsc#937371 - xen vm's running after reboot
  xendomains-libvirtd-conflict.patch</changelog>
<changelog author="carnold@suse.com" date="1438084800">- bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
  memory in rtl8139 device model
  xsa140-qemuu-1.patch
  xsa140-qemuu-2.patch
  xsa140-qemuu-3.patch
  xsa140-qemuu-4.patch
  xsa140-qemuu-5.patch
  xsa140-qemuu-6.patch
  xsa140-qemuu-7.patch
  xsa140-qemut-1.patch
  xsa140-qemut-2.patch
  xsa140-qemut-3.patch
  xsa140-qemut-4.patch
  xsa140-qemut-5.patch
  xsa140-qemut-6.patch
  xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
  block unplug protocol
  xsa139-qemuu.patch</changelog>
<changelog author="carnold@suse.com" date="1439899200">- bsc#907514 - Bus fatal error &amp; sles12 sudden reboot has been
  observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
  shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error &amp; sles11-SP4 sudden reboot has been
  observed
- bsc#923967 - Partner-L3: Bus fatal error &amp; sles11-SP3 sudden
  reboot has been observed
  552d293b-x86-vMSI-X-honor-all-mask-requests.patch
  552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
  5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
  55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
  5583d9c5-x86-MSI-X-cleanup.patch
  5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
  55b0a218-x86-PCI-CFG-write-intercept.patch
  55b0a255-x86-MSI-X-maskall.patch
  55b0a283-x86-MSI-X-teardown.patch
  55b0a2ab-x86-MSI-X-enable.patch
  55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
  552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
  559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
  559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
  559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
  55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
  55a77e4f-dmar-device-scope-mem-leak-fix.patch
  55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
  55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
  x86-MSI-mask.patch
  x86-MSI-pv-unmask.patch
  x86-MSI-X-enable.patch
  x86-MSI-X-maskall.patch
  x86-MSI-X-teardown.patch
  x86-pci_cfg_okay.patch
  x86-PCI-CFG-write-intercept.patch</changelog>
<changelog author="carnold@suse.com" date="1440590400">- bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
  config handling stack overflow
  55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch</changelog>
<changelog author="carnold@suse.com" date="1441713600">- bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
  vnc_client_read() and protocol_client_msg()
  CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
  CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
  loop issue
  CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
  CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch</changelog>
<changelog author="carnold@suse.com" date="1441800000">- Upstream patches from Jan
  55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
  55e43fd8-x86-NUMA-fix-setup_node.patch
  55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
  55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
  54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
  54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
  54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch</changelog>
<changelog author="jfehlig@suse.com" date="1442318400">- bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
  5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch</changelog>
<changelog author="cyliu@suse.com" date="1442404800">- bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
  pci-attach-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1443009600">- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
  readonly flag on disks with qemu-xen (xsa-142)
  CVE-2015-7311-xsa142.patch</changelog>
<changelog author="mlatimer@suse.com" date="1443787200">- bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
  Hotplug scripts not working.
  hotplug-Linux-block-performance-fix.patch</changelog>
<changelog author="carnold@suse.com" date="1444046400">- bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
  secondly show errors
  55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
  55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
  55f9345b-x86-MSI-fail-if-no-hardware-support.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
  560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
  560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
  560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
  560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
  560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch</changelog>
<changelog author="carnold@suse.com" date="1444132800">- bsc#949046 - Increase %suse_version in SP1 to 1316
  xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations</changelog>
<changelog author="jfehlig@suse.com" date="1444132801">- bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
  abort
  54f4985f-libxl-fix-libvirtd-double-free.patch</changelog>
<changelog author="carnold@suse.com" date="1444824000">- bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
  creation of large page mappings by PV guests (XSA-148)
  CVE-2015-7835-xsa148.patch</changelog>
<changelog author="carnold@suse.com" date="1444910400">- bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
  temporary file use in /net/slirp.c
  CVE-2015-4037-qemuu-smb-config-dir-name.patch
  CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
  size to avoid integer overflows
  CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
  CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch</changelog>
<changelog author="carnold@suse.com" date="1444996800">- bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
  vcpu pointer array (DoS) (XSA-149)
  xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
  profiling-related vcpu pointer array (DoS) (XSA-151)
  xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
  profiling hypercalls log without rate limiting (XSA-152)
  xsa152.patch
- Dropped
  55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
  5604f239-x86-PV-properly-populate-descriptor-tables.patch</changelog>
<changelog author="carnold@suse.com" date="1445601600">- bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
  balloon size inaccuracy can crash guests (XSA-153)
  xsa153-libxl.patch</changelog>
<changelog author="carnold@suse.com" date="1446033600">- Upstream patches from Jan
  5604f239-x86-PV-properly-populate-descriptor-tables.patch
  561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
  561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
  561d20a0-x86-hide-MWAITX-from-PV-domains.patch
  561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch</changelog>

</package>
<package pkgid="160c4ae86b6e5a1bb284aa99078618cacd5f6de8f49347c76f448f51d1eec44a" name="xulrunner" arch="src">
    <version epoch="0" ver="38.4.0" rel="3.2"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to 17.0.5esr (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to 17.0.6esr (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- Fix build on powerpc (ppc-xpcshell.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to 17.0.7esr (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to 17.0.8esr (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379505600">- update to 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- require NSPR 4.10 and NSS 3.15.1</changelog>
<changelog author="wr@rosenauer.org" date="1414843200">- update to 31.2.0
- synchronize patchset with firefox-esr
- removed add-plugins.sh in favor of using a pref to use myspell</changelog>
<changelog author="guillaume@opensuse.org" date="1415880000">- Fix %arm build (fix CFLAGS)
- Disable elf-hack for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- readded mozilla-pkgconfig.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1420027200">- Do not require mozilla-js-32bit from xulrunner-32bit: since we
  have shared_js currently set to 0, mozilla-js(-32bit) is not
  being built.</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC</changelog>
<changelog author="wr@rosenauer.org" date="1424347200">- update to 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427716800">- update to 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1430913600">- update to 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- strip baselibs.conf to reflect the current set of packages</changelog>
<changelog author="antoine.belvire@laposte.net" date="1434888000">- Fix compilation with GCC5 (bmo#1153109, bmo#1021171)
  * add mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * add mozilla-fix-compilation-gcc5-bmo-1021171.patch</changelog>
<changelog author="wr@rosenauer.org" date="1435406400">- update to 31.8.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724
    Miscellaneous memory safety hazards
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439208000">- update to xulrunner 38.2.0esr (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- rebased all patches
- dropped obsolete patches:
  * mozilla-sle11.patch
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-libproxy-compat.patch
  * mozilla-fix-compilation-gcc5-bmo-1021171.patch
  * mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * mozilla-aarch64-bmo-810631.patch
- added platform specific patches from Firefox package:
  * mozilla-skia-be-le.patch
  * mozilla-bmo1005535.patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * mozilla-arm64-libjpeg-turbo.patch
  * mozilla-shared-nss-db.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443009600">- update to xulrunner 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to xulrunner 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1</changelog>

</package>
<package pkgid="227304e681727cb7d56be5eb83c2887298160927934d0047c17df4627f3ea959" name="xulrunner" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="3.2"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to 17.0.5esr (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to 17.0.6esr (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- Fix build on powerpc (ppc-xpcshell.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to 17.0.7esr (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to 17.0.8esr (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379505600">- update to 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- require NSPR 4.10 and NSS 3.15.1</changelog>
<changelog author="wr@rosenauer.org" date="1414843200">- update to 31.2.0
- synchronize patchset with firefox-esr
- removed add-plugins.sh in favor of using a pref to use myspell</changelog>
<changelog author="guillaume@opensuse.org" date="1415880000">- Fix %arm build (fix CFLAGS)
- Disable elf-hack for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- readded mozilla-pkgconfig.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1420027200">- Do not require mozilla-js-32bit from xulrunner-32bit: since we
  have shared_js currently set to 0, mozilla-js(-32bit) is not
  being built.</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC</changelog>
<changelog author="wr@rosenauer.org" date="1424347200">- update to 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427716800">- update to 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1430913600">- update to 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- strip baselibs.conf to reflect the current set of packages</changelog>
<changelog author="antoine.belvire@laposte.net" date="1434888000">- Fix compilation with GCC5 (bmo#1153109, bmo#1021171)
  * add mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * add mozilla-fix-compilation-gcc5-bmo-1021171.patch</changelog>
<changelog author="wr@rosenauer.org" date="1435406400">- update to 31.8.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724
    Miscellaneous memory safety hazards
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439208000">- update to xulrunner 38.2.0esr (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- rebased all patches
- dropped obsolete patches:
  * mozilla-sle11.patch
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-libproxy-compat.patch
  * mozilla-fix-compilation-gcc5-bmo-1021171.patch
  * mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * mozilla-aarch64-bmo-810631.patch
- added platform specific patches from Firefox package:
  * mozilla-skia-be-le.patch
  * mozilla-bmo1005535.patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * mozilla-arm64-libjpeg-turbo.patch
  * mozilla-shared-nss-db.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443009600">- update to xulrunner 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to xulrunner 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1</changelog>

</package>
<package pkgid="082c7f2925aaebc9d20ed6617f194b3f305300f91ae4c0cab7f2992314f4f6ee" name="xulrunner-32bit" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="3.2"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to 17.0.5esr (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to 17.0.6esr (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- Fix build on powerpc (ppc-xpcshell.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to 17.0.7esr (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to 17.0.8esr (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379505600">- update to 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- require NSPR 4.10 and NSS 3.15.1</changelog>
<changelog author="wr@rosenauer.org" date="1414843200">- update to 31.2.0
- synchronize patchset with firefox-esr
- removed add-plugins.sh in favor of using a pref to use myspell</changelog>
<changelog author="guillaume@opensuse.org" date="1415880000">- Fix %arm build (fix CFLAGS)
- Disable elf-hack for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- readded mozilla-pkgconfig.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1420027200">- Do not require mozilla-js-32bit from xulrunner-32bit: since we
  have shared_js currently set to 0, mozilla-js(-32bit) is not
  being built.</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC</changelog>
<changelog author="wr@rosenauer.org" date="1424347200">- update to 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427716800">- update to 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1430913600">- update to 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- strip baselibs.conf to reflect the current set of packages</changelog>
<changelog author="antoine.belvire@laposte.net" date="1434888000">- Fix compilation with GCC5 (bmo#1153109, bmo#1021171)
  * add mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * add mozilla-fix-compilation-gcc5-bmo-1021171.patch</changelog>
<changelog author="wr@rosenauer.org" date="1435406400">- update to 31.8.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724
    Miscellaneous memory safety hazards
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439208000">- update to xulrunner 38.2.0esr (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- rebased all patches
- dropped obsolete patches:
  * mozilla-sle11.patch
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-libproxy-compat.patch
  * mozilla-fix-compilation-gcc5-bmo-1021171.patch
  * mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * mozilla-aarch64-bmo-810631.patch
- added platform specific patches from Firefox package:
  * mozilla-skia-be-le.patch
  * mozilla-bmo1005535.patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * mozilla-arm64-libjpeg-turbo.patch
  * mozilla-shared-nss-db.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443009600">- update to xulrunner 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to xulrunner 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1</changelog>

</package>
<package pkgid="3019d6a8032f19589af9160f355ee731cdd7464dbb781fd5d08ead0dd79bb91b" name="xulrunner-debuginfo" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="3.2"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to 17.0.5esr (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to 17.0.6esr (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- Fix build on powerpc (ppc-xpcshell.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to 17.0.7esr (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to 17.0.8esr (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379505600">- update to 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- require NSPR 4.10 and NSS 3.15.1</changelog>
<changelog author="wr@rosenauer.org" date="1414843200">- update to 31.2.0
- synchronize patchset with firefox-esr
- removed add-plugins.sh in favor of using a pref to use myspell</changelog>
<changelog author="guillaume@opensuse.org" date="1415880000">- Fix %arm build (fix CFLAGS)
- Disable elf-hack for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- readded mozilla-pkgconfig.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1420027200">- Do not require mozilla-js-32bit from xulrunner-32bit: since we
  have shared_js currently set to 0, mozilla-js(-32bit) is not
  being built.</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC</changelog>
<changelog author="wr@rosenauer.org" date="1424347200">- update to 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427716800">- update to 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1430913600">- update to 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- strip baselibs.conf to reflect the current set of packages</changelog>
<changelog author="antoine.belvire@laposte.net" date="1434888000">- Fix compilation with GCC5 (bmo#1153109, bmo#1021171)
  * add mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * add mozilla-fix-compilation-gcc5-bmo-1021171.patch</changelog>
<changelog author="wr@rosenauer.org" date="1435406400">- update to 31.8.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724
    Miscellaneous memory safety hazards
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439208000">- update to xulrunner 38.2.0esr (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- rebased all patches
- dropped obsolete patches:
  * mozilla-sle11.patch
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-libproxy-compat.patch
  * mozilla-fix-compilation-gcc5-bmo-1021171.patch
  * mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * mozilla-aarch64-bmo-810631.patch
- added platform specific patches from Firefox package:
  * mozilla-skia-be-le.patch
  * mozilla-bmo1005535.patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * mozilla-arm64-libjpeg-turbo.patch
  * mozilla-shared-nss-db.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443009600">- update to xulrunner 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to xulrunner 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1</changelog>

</package>
<package pkgid="60c843faaa0b58c2dd09a6756a43a2f774fec72f66b0a8b8e6fc73080e1c81fc" name="xulrunner-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="3.2"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to 17.0.5esr (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to 17.0.6esr (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- Fix build on powerpc (ppc-xpcshell.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to 17.0.7esr (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to 17.0.8esr (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379505600">- update to 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- require NSPR 4.10 and NSS 3.15.1</changelog>
<changelog author="wr@rosenauer.org" date="1414843200">- update to 31.2.0
- synchronize patchset with firefox-esr
- removed add-plugins.sh in favor of using a pref to use myspell</changelog>
<changelog author="guillaume@opensuse.org" date="1415880000">- Fix %arm build (fix CFLAGS)
- Disable elf-hack for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- readded mozilla-pkgconfig.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1420027200">- Do not require mozilla-js-32bit from xulrunner-32bit: since we
  have shared_js currently set to 0, mozilla-js(-32bit) is not
  being built.</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC</changelog>
<changelog author="wr@rosenauer.org" date="1424347200">- update to 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427716800">- update to 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1430913600">- update to 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- strip baselibs.conf to reflect the current set of packages</changelog>
<changelog author="antoine.belvire@laposte.net" date="1434888000">- Fix compilation with GCC5 (bmo#1153109, bmo#1021171)
  * add mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * add mozilla-fix-compilation-gcc5-bmo-1021171.patch</changelog>
<changelog author="wr@rosenauer.org" date="1435406400">- update to 31.8.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724
    Miscellaneous memory safety hazards
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439208000">- update to xulrunner 38.2.0esr (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- rebased all patches
- dropped obsolete patches:
  * mozilla-sle11.patch
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-libproxy-compat.patch
  * mozilla-fix-compilation-gcc5-bmo-1021171.patch
  * mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * mozilla-aarch64-bmo-810631.patch
- added platform specific patches from Firefox package:
  * mozilla-skia-be-le.patch
  * mozilla-bmo1005535.patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * mozilla-arm64-libjpeg-turbo.patch
  * mozilla-shared-nss-db.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443009600">- update to xulrunner 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to xulrunner 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1</changelog>

</package>
<package pkgid="85c0dfd544a2bd0d4477e3f5c7c6cc92590660da81ef3d6f6858204448d06dcd" name="xulrunner-debugsource" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="3.2"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to 17.0.5esr (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to 17.0.6esr (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- Fix build on powerpc (ppc-xpcshell.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to 17.0.7esr (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to 17.0.8esr (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379505600">- update to 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- require NSPR 4.10 and NSS 3.15.1</changelog>
<changelog author="wr@rosenauer.org" date="1414843200">- update to 31.2.0
- synchronize patchset with firefox-esr
- removed add-plugins.sh in favor of using a pref to use myspell</changelog>
<changelog author="guillaume@opensuse.org" date="1415880000">- Fix %arm build (fix CFLAGS)
- Disable elf-hack for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- readded mozilla-pkgconfig.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1420027200">- Do not require mozilla-js-32bit from xulrunner-32bit: since we
  have shared_js currently set to 0, mozilla-js(-32bit) is not
  being built.</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC</changelog>
<changelog author="wr@rosenauer.org" date="1424347200">- update to 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427716800">- update to 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1430913600">- update to 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- strip baselibs.conf to reflect the current set of packages</changelog>
<changelog author="antoine.belvire@laposte.net" date="1434888000">- Fix compilation with GCC5 (bmo#1153109, bmo#1021171)
  * add mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * add mozilla-fix-compilation-gcc5-bmo-1021171.patch</changelog>
<changelog author="wr@rosenauer.org" date="1435406400">- update to 31.8.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724
    Miscellaneous memory safety hazards
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439208000">- update to xulrunner 38.2.0esr (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- rebased all patches
- dropped obsolete patches:
  * mozilla-sle11.patch
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-libproxy-compat.patch
  * mozilla-fix-compilation-gcc5-bmo-1021171.patch
  * mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * mozilla-aarch64-bmo-810631.patch
- added platform specific patches from Firefox package:
  * mozilla-skia-be-le.patch
  * mozilla-bmo1005535.patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * mozilla-arm64-libjpeg-turbo.patch
  * mozilla-shared-nss-db.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443009600">- update to xulrunner 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to xulrunner 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1</changelog>

</package>
<package pkgid="814676667260c186581897deb7e3040b0646f1e6ff6dc69a0dcf4721af8cff1e" name="xulrunner-devel" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="3.2"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to 17.0.4esr (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to 17.0.5esr (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to 17.0.6esr (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- Fix build on powerpc (ppc-xpcshell.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to 17.0.7esr (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to 17.0.8esr (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379505600">- update to 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- require NSPR 4.10 and NSS 3.15.1</changelog>
<changelog author="wr@rosenauer.org" date="1414843200">- update to 31.2.0
- synchronize patchset with firefox-esr
- removed add-plugins.sh in favor of using a pref to use myspell</changelog>
<changelog author="guillaume@opensuse.org" date="1415880000">- Fix %arm build (fix CFLAGS)
- Disable elf-hack for aarch64</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- readded mozilla-pkgconfig.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1420027200">- Do not require mozilla-js-32bit from xulrunner-32bit: since we
  have shared_js currently set to 0, mozilla-js(-32bit) is not
  being built.</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC</changelog>
<changelog author="wr@rosenauer.org" date="1424347200">- update to 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427716800">- update to 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1430913600">- update to 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- strip baselibs.conf to reflect the current set of packages</changelog>
<changelog author="antoine.belvire@laposte.net" date="1434888000">- Fix compilation with GCC5 (bmo#1153109, bmo#1021171)
  * add mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * add mozilla-fix-compilation-gcc5-bmo-1021171.patch</changelog>
<changelog author="wr@rosenauer.org" date="1435406400">- update to 31.8.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724
    Miscellaneous memory safety hazards
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439208000">- update to xulrunner 38.2.0esr (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- rebased all patches
- dropped obsolete patches:
  * mozilla-sle11.patch
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-libproxy-compat.patch
  * mozilla-fix-compilation-gcc5-bmo-1021171.patch
  * mozilla-fix-compilation-gcc5-bmo-1153109.patch
  * mozilla-aarch64-bmo-810631.patch
- added platform specific patches from Firefox package:
  * mozilla-skia-be-le.patch
  * mozilla-bmo1005535.patch
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * mozilla-arm64-libjpeg-turbo.patch
  * mozilla-shared-nss-db.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443009600">- update to xulrunner 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to xulrunner 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1</changelog>

</package>

<package pkgid="a02dadab8941ca2f27ca5c094fecbde4bc0065a112ff5da8b2950a820c8e7c80" name="alsa" arch="src">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="6b3393f0018f3e79edede476adf917764afaffaac4ff21e890f5bfd9b1780557" name="alsa" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="c5f4696ede4d2ca05e3e482b57eab86e3ca5f1b322649b28df76b736cdcce11b" name="alsa-debugsource" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="c5b4582db2c397fc926b51f15dd28d619953b2c13d768fc4b83bca266f876c33" name="alsa-devel" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="8b493b70470a80f9256c3eac03e7c9e95b95778399fd19202c17aa7660599427" name="alsa-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="4db219039a4e2401c70ee777656b9e791c1902d61d40081b7ae71f857da2d1f0" name="alsa-docs" arch="noarch">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="eae58d6f0ae4037706ef3919533b16b03c50490ef1804dfaac1cdfd4c92e6320" name="gnome-session" arch="src">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="fb1a383f4c1aded78abb51c5a257ac3de833055397e92a1e0f80e6802729485c" name="gnome-session" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="c71a5b134c03b4f2f42523e12cad30ae616503f9ecd908c79da2d6219187f77f" name="gnome-session-core" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="ed40269f60226764dbbc78d1f01a2d068f46741e61b41a90e78f8c97c38b5ba2" name="gnome-session-core-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="7a178965d2ef8eaf384ef32f60867cff6f32f2b6bb3248f7425412ad4be4abf7" name="gnome-session-debugsource" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="3b694383ca8d9e68f1dc67472ab45f8d48f7e29a26d6f297079f093f6231993d" name="gnome-session-default-session" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="a92694791202f4934f9d04d2f37b8ac1d43be350581994fafcc747ba446e8e27" name="gnome-session-lang" arch="noarch">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="2e31709af1d139e59d44f87b237169241daff55726132341a2204806035886bf" name="gnome-session-wayland" arch="x86_64">
    <version epoch="0" ver="3.16.0" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 3.10.1 (bnc#845551):
  + Fix a crash on session end (bgo#709221).
  + Updated translations.</changelog>
<changelog author="mgorse@suse.com" date="1386590400">- Add gnome-session-upower.patch: Only use UPower API when building
  against UPower &lt;= 0.9.22. In any other case, the respective
  functionality is provided by systemd.
- Drop pkgconfig(upower-glib) BuildRequires: due to above patch,
  there is no longer any need for UPower.</changelog>
<changelog author="cxiong@novell.com" date="1394020800">- Remove special code for GNOME classic: it was introduced because
  of a bug in XDM that messed arguments up (bnc#866874).</changelog>
<changelog author="dimstar@opensuse.org" date="1394107200">- Update to version 3.11.1:
  + Fix a possible crash in the presence interface.
  + gsm-manager: Don't abort when all clients exit (bgo#710480).
  + gsm-util: Use g_unsetenv() rather than g_setenv(variable, NULL)
    (bgo#710485).
  + Only support UPower 0.9.
  + Drop EggSMClient.
  + Remove gnome-session-properties (bgo#708923).
  + Updated translations.
- Drop gnome-session-upower.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107201">- Update to version 3.11.2:
  + Blacklist nv25
  + Use new GSubprocess api
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107202">- Update to version 3.11.3:
  + Warning fixes.
  + Use modern methods for finding gsettings schemas.
  + fail whale size request fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107203">- Update to version 3.11.4:
  + Fix crash on startup for non-systemd systems.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1394107204">- Add pkgconfig(xtrans) BuildRequires: we lost this when the
  Xorg-stack was reorganized, and as configure did not mark it
  mandatory, it 'slipped', resulting in bnc#862331 (gnome-session
  listens on remote TCP sockets).</changelog>
<changelog author="dimstar@opensuse.org" date="1395316800">- Update to version 3.11.92:
  + Update FSF address in copyright headers.
  + Small wayland update.
  + Improve xtrans autogoo.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1395835200">- Update to version 3.12.0:
  + Fix for wayland support.</changelog>
<changelog author="dimstar@opensuse.org" date="1396699200">- Fix dependency of gnome-session-wayland: require
  gnome-shell-wayland instead of regular gnome-shell.</changelog>
<changelog author="dimstar@opensuse.org" date="1397563200">- Update to version 3.12.1:
  + Add DesktopNames to session files.
  + doap file updates.
  + ConsoleKit fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1405771200">- Update to version 3.13.3:
  + Fixes for XDG_CURRENT_DESKTOP semantic shift.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1411387200">- Update to version 3.14.0:
  + DOAP updates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 3.15.3:
  + Port to GDBus.
  + Misc clean ups.
  + Updated translations.
- Pass --enable-systemd to configure to make sure we build with
  systemd support.</changelog>
<changelog author="dimstar@opensuse.org" date="1422532800">- Update to version 3.15.4:
  + Allow turning on debugging with an environment variable.
  + Don't set DISPLAY in wayland sessions.
  + Add back session-name property.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1424347200">- Update to version 3.15.90:
  + Don't try to failwhale when the wayland compositor fails to
    start.
  + Support newer systemd client library layout.
  + Cut out more vestigial dbus-glib remnants.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1426680000">- Update to version 3.15.92:
  + Fix bug in tracking if the session is active.
  + Fail whale fixes.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1427112000">- Update to version 3.16.0:
  + No changes from last version, stable bump.</changelog>
<changelog author="dimstar@opensuse.org" date="1447070400">- Update gnome.desktop: add DesktopNames (upstream introduced in
  GNOME 3.12.1). Fixes boo#931314.</changelog>

</package>

<package pkgid="b98479cd2db41e0df61c301cbd5bd992aeaa571c0094b00c0119244f17d5a8bc" name="kpartx" arch="x86_64">
    <version epoch="0" ver="0.5.0" rel="50.1"/>

<changelog author="hare@suse.de" date="1407931200">- Do not remove paths without uevent (bnc#890998)</changelog>
<changelog author="hare@suse.de" date="1408363200">- Fixup device-mapper cookie handling yet again (bnc#890902)
- Allow zero-sized devices during configuration
- multipathd: issue warning on CLI command timeout (bnc#891189)</changelog>
<changelog author="hare@suse.de" date="1408449600">- Use strlen() when checking for valid wwid
- kpartx: zero out cookie (bnc#890902)
- multipathd: Check for empty wwid when processing events
  (bnc#892214)</changelog>
<changelog author="hare@suse.de" date="1408622400">- Revert to ACT_RELOAD in domap() if the map exists
- multipathd: asynchronous configuration (bnc#891189)
- multipathd: timeout CLI commands when waiting for lock
  (bnc#891189)
- Remove dm_udev_XXX wrapper functions
- uxlsnr: use typedef for trigger function
- multipathd: lock cli client list
- multipathd: Use standard lists for CLI handling</changelog>
<changelog author="hare@suse.de" date="1409313600">- Fixup segfault during uev_path_add() (bnc#892214)</changelog>
<changelog author="trenn@suse.de" date="1409659200">- Do not call mkinitrd in rpm macros directly, make use of
  %{?regenerate_initrd_posttrans} and %{?regenerate_initrd_post}
  instead to avoid rebuilding of initrd for each package that
  needs initrd recreation. Only update initrd once per install/update
  if needed</changelog>
<changelog author="hare@suse.de" date="1409745600">- Create rcmultipathd links (bnc#894513)
- multipathd: fix segfault in checkerloop() (bnc#894513)
- Use regenerate_posttrans rpm macros (bnc#892181)</changelog>
<changelog author="hare@suse.de" date="1409745601">- Fixup segfault due to double unlock
- Skip USB devices during discovery (bnc#865577)
- Ignore devices when sysfs_get_tgt_nodename fails (bnc#865577)
- Use sysfs attribute vpd_pg80 to read serial number</changelog>
<changelog author="hare@suse.de" date="1410955200">- Fix segfault in recv_packet (bnc#896678)</changelog>
<changelog author="hare@suse.de" date="1411387200">- Really fix segfault in recv_packet (bnc#896678)
- Allow empty revision during discovery (bnc#896864)</changelog>
<changelog author="hare@suse.de" date="1418212800">- libmultipath: Fall back to SG_IO if no UID could be assigned
  (bnc#908915)
- Assign local priority for NAA VPD descriptor (bnc#907483)
- libmultipath: finally fix dev_loss_tmo setting (bnc#889927)
- libmultipath: Do not use 'sscanf' for parsing integers (bnc#889927)
- devmapper: do not flush I/O for DM_DEVICE_CREATE (bnc#901809)
- kpartx: handle more than 256 loop devices (bnc#898427)
- multipathd: fixup locking in uev_remove_map() (bnc#901891)
- multipathd: use global variable for uxsock timeout (bnc#900758)
- multipathd: remove unused variable in cli_reconfigure()
- Add %service calls for multipathd.socket</changelog>
<changelog author="hare@suse.de" date="1418731200">- Do not automatically fall back to vpd uid generation
- Improve vpd parsing
- multipathd: trigger all devices on startup (bnc#901465)
- Unset 'uid_attribute' on failure</changelog>
<changelog author="hare@suse.de" date="1422532800">- skip uninitialized devices during reconfiguration (bnc#908915)
- memory overflow when printing help text (bnc#909742)</changelog>
<changelog author="hare@suse.de" date="1426248000">- libmultipath: make vpd page 0x80 optional (bsc#917963)
- Add HP MSA 2040 to the hardware table (bsc#920189)
- Revert 'Skip unhandled device types' (bsc#917701)</changelog>
<changelog author="hare@suse.de" date="1426680000">- Add dependency on systemd-udevd.service (bsc#903001)
- Use ALUA for HP 3PAR (bsc#922105)
- Add DX8700 S3 and DX8900 S3 defaults (bsc#921703)
- Load all device handler modules on startup (bsc#908529)</changelog>
<changelog author="hare@suse.de" date="1428408000">- Only import ID_FS_XXX variables if not set (bsc#909358)
- Fixup regular expression for HP MSA 2040 (bsc#920189)</changelog>
<changelog author="hare@suse.de" date="1428494400">- Remove 'udev_sync' argument from dm_simplecmd (bsc#903001)
- Ensure multipathd is started before systemd-udev-trigger</changelog>
<changelog author="hare@suse.de" date="1438603200">- Create package for SLE12-SP1.
  * Remove multipath-tools-0.5.0-sles12.diff.bz2
  * Add multipath-tools-0.5.0-sles12-sp1.diff.bz2
- kpartx: parse emulated DASD devices
- multipathd: Fixup queueing mode in 'show maps status' (bsc#933885)
- multipathd: Accept zero-sized paths in ev_add_path
- Always set DM_UDEV_DISABLE_LIBRARY_FALLBACK (bsc#933282)
- libmultipath: Fixup 'DM_DEVICE_RELOAD' handling (bsc#933282)
- libmultipath: correctly display checker status</changelog>
<changelog author="hare@suse.de" date="1440504000">- Fixup hang in 'multipath -f' (bsc#941954)</changelog>
<changelog author="hare@suse.de" date="1446811200">- Fixes for md_monitor on zFCP (FATE#319070):
  * strict loop timings
  * multipathd: fixup a crash when invoking CLI commands
  * multipathd: implement 'show map $map format $format</changelog>

</package>

<package pkgid="e97efe7fef39087f58bb829487838b8d4ad8f8facf0ea3602ec218cc54623979" name="kpartx-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.5.0" rel="50.1"/>

<changelog author="hare@suse.de" date="1407931200">- Do not remove paths without uevent (bnc#890998)</changelog>
<changelog author="hare@suse.de" date="1408363200">- Fixup device-mapper cookie handling yet again (bnc#890902)
- Allow zero-sized devices during configuration
- multipathd: issue warning on CLI command timeout (bnc#891189)</changelog>
<changelog author="hare@suse.de" date="1408449600">- Use strlen() when checking for valid wwid
- kpartx: zero out cookie (bnc#890902)
- multipathd: Check for empty wwid when processing events
  (bnc#892214)</changelog>
<changelog author="hare@suse.de" date="1408622400">- Revert to ACT_RELOAD in domap() if the map exists
- multipathd: asynchronous configuration (bnc#891189)
- multipathd: timeout CLI commands when waiting for lock
  (bnc#891189)
- Remove dm_udev_XXX wrapper functions
- uxlsnr: use typedef for trigger function
- multipathd: lock cli client list
- multipathd: Use standard lists for CLI handling</changelog>
<changelog author="hare@suse.de" date="1409313600">- Fixup segfault during uev_path_add() (bnc#892214)</changelog>
<changelog author="trenn@suse.de" date="1409659200">- Do not call mkinitrd in rpm macros directly, make use of
  %{?regenerate_initrd_posttrans} and %{?regenerate_initrd_post}
  instead to avoid rebuilding of initrd for each package that
  needs initrd recreation. Only update initrd once per install/update
  if needed</changelog>
<changelog author="hare@suse.de" date="1409745600">- Create rcmultipathd links (bnc#894513)
- multipathd: fix segfault in checkerloop() (bnc#894513)
- Use regenerate_posttrans rpm macros (bnc#892181)</changelog>
<changelog author="hare@suse.de" date="1409745601">- Fixup segfault due to double unlock
- Skip USB devices during discovery (bnc#865577)
- Ignore devices when sysfs_get_tgt_nodename fails (bnc#865577)
- Use sysfs attribute vpd_pg80 to read serial number</changelog>
<changelog author="hare@suse.de" date="1410955200">- Fix segfault in recv_packet (bnc#896678)</changelog>
<changelog author="hare@suse.de" date="1411387200">- Really fix segfault in recv_packet (bnc#896678)
- Allow empty revision during discovery (bnc#896864)</changelog>
<changelog author="hare@suse.de" date="1418212800">- libmultipath: Fall back to SG_IO if no UID could be assigned
  (bnc#908915)
- Assign local priority for NAA VPD descriptor (bnc#907483)
- libmultipath: finally fix dev_loss_tmo setting (bnc#889927)
- libmultipath: Do not use 'sscanf' for parsing integers (bnc#889927)
- devmapper: do not flush I/O for DM_DEVICE_CREATE (bnc#901809)
- kpartx: handle more than 256 loop devices (bnc#898427)
- multipathd: fixup locking in uev_remove_map() (bnc#901891)
- multipathd: use global variable for uxsock timeout (bnc#900758)
- multipathd: remove unused variable in cli_reconfigure()
- Add %service calls for multipathd.socket</changelog>
<changelog author="hare@suse.de" date="1418731200">- Do not automatically fall back to vpd uid generation
- Improve vpd parsing
- multipathd: trigger all devices on startup (bnc#901465)
- Unset 'uid_attribute' on failure</changelog>
<changelog author="hare@suse.de" date="1422532800">- skip uninitialized devices during reconfiguration (bnc#908915)
- memory overflow when printing help text (bnc#909742)</changelog>
<changelog author="hare@suse.de" date="1426248000">- libmultipath: make vpd page 0x80 optional (bsc#917963)
- Add HP MSA 2040 to the hardware table (bsc#920189)
- Revert 'Skip unhandled device types' (bsc#917701)</changelog>
<changelog author="hare@suse.de" date="1426680000">- Add dependency on systemd-udevd.service (bsc#903001)
- Use ALUA for HP 3PAR (bsc#922105)
- Add DX8700 S3 and DX8900 S3 defaults (bsc#921703)
- Load all device handler modules on startup (bsc#908529)</changelog>
<changelog author="hare@suse.de" date="1428408000">- Only import ID_FS_XXX variables if not set (bsc#909358)
- Fixup regular expression for HP MSA 2040 (bsc#920189)</changelog>
<changelog author="hare@suse.de" date="1428494400">- Remove 'udev_sync' argument from dm_simplecmd (bsc#903001)
- Ensure multipathd is started before systemd-udev-trigger</changelog>
<changelog author="hare@suse.de" date="1438603200">- Create package for SLE12-SP1.
  * Remove multipath-tools-0.5.0-sles12.diff.bz2
  * Add multipath-tools-0.5.0-sles12-sp1.diff.bz2
- kpartx: parse emulated DASD devices
- multipathd: Fixup queueing mode in 'show maps status' (bsc#933885)
- multipathd: Accept zero-sized paths in ev_add_path
- Always set DM_UDEV_DISABLE_LIBRARY_FALLBACK (bsc#933282)
- libmultipath: Fixup 'DM_DEVICE_RELOAD' handling (bsc#933282)
- libmultipath: correctly display checker status</changelog>
<changelog author="hare@suse.de" date="1440504000">- Fixup hang in 'multipath -f' (bsc#941954)</changelog>
<changelog author="hare@suse.de" date="1446811200">- Fixes for md_monitor on zFCP (FATE#319070):
  * strict loop timings
  * multipathd: fixup a crash when invoking CLI commands
  * multipathd: implement 'show map $map format $format</changelog>

</package>

<package pkgid="ec3a91b11a9a7eab2f4a083ef12869a7de7ef5f80cf5279dc9027072594af309" name="libasound2" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="ac2189dd238d5f7a1fde31f6f1807583edef2dc3ed7a55a067859b69d288ab29" name="libasound2-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="ff8ad97a5cd71e59ab5820123421f30b8131148531660184c80bd35fc31e6f2d" name="libasound2-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="ec17f234f63be954d117109ce78a0f0ccd4f02071712faa8b4b50fd3ac11ded1" name="libasound2-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.29" rel="10.1"/>

<changelog author="tiwai@suse.de" date="1394539200">- Update alsa-info.sh to match dmesg with snd_
- Run spec-cleaner
- Add missing Loopback.conf manually
- Upstream fixes: minor clean ups, 2.1 PCM channel config support,
  portability improvements, PCM float format conversion fix,
  fix for ioplug 32bit hwptr wrap, etc.
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch</changelog>
<changelog author="tiwai@suse.de" date="1395144000">- Fix the silent output with PulseAudio (bnc#868795)
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1395316800">- Correct the default values in /etc/sysconfig/sound comments
  (bnc#869403)</changelog>
<changelog author="tiwai@suse.de" date="1396526400">- Backport upstream fixes:
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch
- Remove the temporary fix that has been replaced by the fixes
  above:
  0037-pcm-route-Don-t-handle-no-matching-chmap-as-a-seriou.patch</changelog>
<changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-lib 1.0.28:
  All pervious fix patches are obsoleted:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch
  0010-remove-unnecessary-obsolete-compat-hsearch_r.c.patch
  0011-local.h-include-sys-types.h-to-fix-issues-with-pcm.h.patch
  0012-test-chmap-Add-missing-usage-text-for-s-option.patch
  0013-include-global.h-don-t-define-timeval-and-timespec-s.patch
  0014-conf.c-use-portable-way-to-initialize-recursive-mute.patch
  0015-pcm_file-fix-SEGFAULT-if-file-option-is-missing-whil.patch
  0016-pcm_file-fixed-memory-leak.patch
  0017-pcm_file-don-t-touch-infile-on-playback-and-output-f.patch
  0018-pcm_file-document-new-argument-to-snd_pcm_file_open.patch
  0019-dmix-Don-t-use-assert-and-abort.patch
  0020-minor-malloc-changes.patch
  0021-alsa-lib-minor-typo-in-pcm-doc.patch
  0022-control_hw-fix-potential-memory-leak.patch
  0023-pcm-initialize-pcm_dmix-monotonic-field.patch
  0024-pcm-initialize-monotonic-field-for-dshare-and-dsnoop.patch
  0025-pcm-use-CLOCK_REALTIME-for-non-monotonic-ts.patch
  0026-alsa-lib-heavy-pcm-atomics-cleanup.patch
  0027-conf-Add-basic-infrastructure-for-2.1-surround-sound.patch
  0028-conf-Add-surround-2.1-support-to-all-cards.patch
  0029-Portability-fix-look-for-sys-endian.h-as-well-as-end.patch
  0030-autotools-update-style.patch
  0031-pcm-Insert-linear-to-float-conversion-when-rate-or-c.patch
  0032-pcm-route-Allow-chmap-syntax-for-slave-channels-in-t.patch
  0033-pcm-route-Select-slave-chmap-based-on-ttable-informa.patch
  0034-conf-Allow-2.1-surround-to-use-different-number-of-c.patch
  0035-pcm-Wrap-hw_ptr-to-boundary-in-pcm_ioplug.patch
  0036-src-conf-cards-Add-missing-entry-for-Loopback.conf.patch
  0037-route-Return-NULL-in-case-of-zero-found-channels-in-.patch
  0038-route-Fix-invalid-pointer-access.patch
  0039-pcm-ladspa-Delay-LADSPA-plugin-activate-call.patch</changelog>
<changelog author="tiwai@suse.de" date="1406030400">- Remove superfluous Loopback.conf from the source, as it was
  already included in 1.0.28 tarball
- Backport upstream fixes: UCM dummy PCM definition, ICE1712 surround
  definitions, USB-audio secondary PCM definition, PCM rate plugin
  boundary overwrap fix, MONOTONIC_RAW timestamp support, PCM route
  plugin 3-byte format fixes, etc:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch</changelog>
<changelog author="tiwai@suse.de" date="1406808000">- Remove obsoleted README.SuSE (bnc#889023)
- Correct SUSE branding names in some texts (bnc#889023,FATE#316521)
- Properly include time.h for CLOCK_MONOTONIC_RAW:
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch</changelog>
<changelog author="tiwai@suse.de" date="1407844800">- Backport upstream fixes for supporting the missing DSD formats:
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
- Remove alsa-info.sh from alsa.rpm; it's moved into alsa-utils</changelog>
<changelog author="tiwai@suse.de" date="1409054400">- Yet more DSD fix, hwdep iface sync with the recent kernel, and a
  minor documentation fix from upstream:
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch</changelog>
<changelog author="tiwai@suse.de" date="1413547200">- Backport upstream fixes / enhancements: mostly small fixes
  spotted by coccinelle and oethers, the fixes for proper rewind
  support, a new DSD format support, hwdep definitions sync, and
  addition of PAZ00 UCM configs.
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in alsa-init.sh scripts</changelog>
<changelog author="tiwai@suse.de" date="1417780800">- Backport upstream fixes:
  A couple of USB-audio config addition/fix, dmix PCM stop fix,
  a memory leak fix, DSD format endianess fix, PCM timestamp fixes, etc.
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch</changelog>
<changelog author="tiwai@suse.de" date="1422446400">- Backport upstream fixes: new OXFW hwdep definition, chmap print
  overflow fix, improvement of UCM parser, GoogleNyan UCM config,
  removal of gethostbyname() usages:
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch
- Suppress timestamps in the generated documents for make the
  package comparison easier:
  alsa-docs-suppress-timestamp.patch</changelog>
<changelog author="tiwai@suse.de" date="1424952000">- Updated to alsa-lib 1.0.29:
  Just a version bump including previous fixes
- Drop the obsoleted patches:
  0001-ucm-Document-PlaybackPCMIsDummy-and-CapturePCMIsDumm.patch
  0002-ICE1712-add-surround71-pcm-definition.patch
  0003-USB-Audio-Add-second-S-PDIF-device-on-Phiree-U2.patch
  0004-pcm-rate-fix-hw_ptr-exceed-the-boundary.patch
  0005-pcm-Provide-a-CLOCK_MONOTONIC_RAW-timestamp-type.patch
  0006-Add-timestamp-type-to-sw_params-internal-only.patch
  0007-pcm-Add-sw_params-API-functions-to-get-set-timestamp.patch
  0008-pcm-Implement-timestamp-type-setup-in-hw-plugin.patch
  0009-pcm-Implement-timestamp-type-handling-in-all-plugins.patch
  0010-test-audio_time-Set-timestamp-type-explicitly.patch
  0011-pcm-route-Use-get-put-labels-for-all-3-byte-formats.patch
  0012-pcm-Fill-sw_params-proto-field.patch
  0013-pcm-route-Use-get32-for-multi-source-route-calculati.patch
  0014-pcm-Drop-snd_pcm_linear_-get-put-32_index.patch
  0015-pcm-pcm_local.h-include-time.h-to-enable-CLOCK_MONOT.patch
  0016-pcm-Fix-DSD-formats-userland-usability.patch
  0017-Sync-include-sound-asound.h-with-3.17-rc1-kernel.patch
  0018-pcm-Add-missing-signed-and-endianess-definitions-for.patch
  0019-Sync-enum-snd_hwdep_iface_t-with-include-asound-asou.patch
  0020-pcm-2nd-round-of-pcm_misc-DSD-fixes.patch
  0021-doc-fix-cross-compiling-example.patch
  0022-pcm-fix-snd_pcm_mmap_hw_avail-near-the-boundary.patch
  0023-pcm-fix-return-value-of-snd_pcm_share_slave_avail.patch
  0024-pcm-add-new-32-bit-DSD-sample-format.patch
  0025-dmix-actually-rewind-when-running-or-being-drained.patch
  0026-pcm-express-the-rewind-size-limitation-logic-better.patch
  0027-pcm-handle-negative-values-from-snd_pcm_mmap_hw_avai.patch
  0028-pcm-rate-use-the-snd_pcm_mmap_hw_avail-function.patch
  0029-pcm-null-use-the-snd_pcm_mmap_avail-function.patch
  0030-rate-handle-negative-values-from-snd_pcm_mmap_playba.patch
  0031-dsnoop-rewindable-and-forwardable-logic-was-swapped.patch
  0033-pcm-file-don-t-recurse-in-the-rewindable-and-forward.patch
  0034-pcm-route-Fix-the-bad-condition-always-false.patch
  0035-pcm-rate-hw_avail-must-not-be-negative-before-starti.patch
  0036-hwdep-add-missing-declaration-for-snd_hwdep_poll_des.patch
  0037-mixer-fixed-double-free.patch
  0038-pcm_file-fixed-missing-free.patch
  0039-sbase-fixed-missing-free.patch
  0040-rawmidi-close-handle-h.patch
  0041-pcm_share-fixing-missing-mutex-unlock.patch
  0042-simple_abst-null-check-for-lib.patch
  0043-socket-missing-socket-close.patch
  0044-pcm_hooks-null-check-for-h.patch
  0045-conf-return-negative-value-in-case-of-error.patch
  0046-control-return-negative-value-in-case-of-error.patch
  0047-pcm-return-negative-value-in-case-of-error.patch
  0048-mixer-Fix-missing-hctl-handle-free-in-snd_mixer_atta.patch
  0049-conf-ucm-PAZ00-add-Toshiba-AC100-Dynabook-AZ-new-con.patch
  0050-USB-Audio-Add-Scarlett-2i4-USB-to-S-PDIF-blacklist.patch
  0051-snd_user_file-fix-memory-leak.patch
  0052-pcm-dmix-Don-t-ignore-SND_TIMER_EVENT_MSTOP.patch
  0053-snd_dlsym-only-do-versioning-checks-if-built-with-ve.patch
  0054-dlmisc-Remove-unused-label.patch
  0055-USB-audio-Add-five-more-cards-to-IEC958-blacklist.patch
  0056-pcm-Fix-DSD-sample-format-endianess-and-add-big-endi.patch
  0057-mixer-Fix-inclusion-of-config.h.patch
  0058-mixer-Fix-unused-parameter-warnings.patch
  0059-ucm-Fix-uninitialized-err-in-snd_use_case_set.patch
  0060-pcm-Fix-assorted-tstamp_type-bugs-omissions.patch
  0061-hwdep-add-OXFW-driver-support.patch
  0062-pcm-fix-buffer-overflow-in-snd_pcm_chmap_print.patch
  0063-control-enable-octal-and-hexadecimal-parse.patch
  0064-autotools-fix-ucm-partial-build.patch
  0065-conf-ucm-GoogleNyan-Add-configuration.patch
  0066-ucm-add-binary-configure-file-parse.patch
  0067-Remove-unused-hostname-resolution-in-shm-plugins-and.patch</changelog>
<changelog author="tiwai@suse.de" date="1432296000">- Backport upstream fixes: UCM updates, Broadwell UCM support,
  namehint fixes, fix faulty assert in PCM plugins, etc:
  0001-ucm-document-some-standard-values.patch
  0002-conf-ucm-broadwell-rt286-add-ucm-config.patch
  0003-conf-ucm-Add-Makefile.am-for-broadwell-rt286-ucm-con.patch
  0004-ucm-reformat-snd_use_case_get-doc.patch
  0005-ucm-improve-jack-configuration-documentation.patch
  0006-USB-audio-Sound-Blaster-HD-iec958-is-on-device-1.patch
  0007-Sync-include-sound-asound.h-with-4.1-kernel.patch
  0008-conf-ucm-broadwell-rt286-change-to-use-the-correct-j.patch
  0009-namehint-Fix-invalid-list-access-in-snd_device_name_.patch
  0010-namehint-Fix-the-listing-without-device-number.patch
  0011-namehint-Fix-bad-free-with-invalid-iface-name.patch
  0012-Allow-hint-for-ctl-hwdep-timer-and-seq.patch
  0013-conf-Add-hint-descriptions-to-ctl-hwdep-seq-and-time.patch
  0014-conf-ucm-broadwell-rt286-change-to-set-capture-volum.patch
  0015-ucm-allow-multiple-devices-in-JackHWMute.patch
  0016-pcm-Remove-assert-from-snd_pcm_hw_params_slave.patch</changelog>
<changelog author="tiwai@suse.de" date="1434628800">- Backport upstream fixes: fix bogus assert() in hw_params, a few
  PCM dmix/dshare/dsnoop fixes, enhacement of amixer, etc:
  0017-test-pcm-Fix-generated-values-with-float-PCM-format.patch
  0018-test-pcm_min-Fix-error-messages.patch
  0019-pcm-Don-t-assert-in-_snd_pcm_hw_params_internal.patch
  0020-pcm-Fix-snd_pcm_status-for-dmix-co.patch
  0021-control-Allow-cset-ing-specific-values-in-the-multi-.patch
  0022-PCM-snd_pcm_xxxx_drain-maybe-blocked-after-suspend-a.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
<changelog author="tiwai@suse.de" date="1438689600">- Backport upstream fixes: surround41/50 chmap fix, UCM documents,
  config string fix, PCM timestamp query API, replacement of list.h
  with LGPL:
  0023-surround41-50.conf-Use-chmap-syntax-for-better-flexi.patch
  0024-ucm-docs-fix-doxygen-exclude-patch-for-UCM-local-hea.patch
  0025-ucm-docs-Fix-doxygen-formatting-for-UCM-main-page.patch
  0026-docs-Add-UCM-link-to-main-doxygen-page.patch
  0027-Replace-unsafe-characters-with-_-in-card-name.patch
  0028-pcm-add-helper-functions-to-query-timestamping-capab.patch
  0029-pcm-add-support-for-get-set_audio_htstamp_config.patch
  0030-pcm-add-support-for-new-STATUS_EXT-ioctl.patch
  0031-test-fix-audio_time-with-new-get-set-audio_tstamp_co.patch
  0032-test-audio_time-show-report-validity-and-accuracy.patch
  0033-pcm-restore-hw-params-on-set-latency-failed.patch
  0034-Replace-list.h-with-its-own-version.patch
- Backport topology API addition patches:
  0035-topology-uapi-Add-UAPI-headers-for-topology-ABI.patch
  0036-topology-Add-topology-core-parser.patch
  0037-topology-Add-text-section-parser.patch
  0038-topology-Add-PCM-parser.patch
  0039-topology-Add-operations-parser.patch
  0040-topology-Add-private-data-parser.patch
  0041-topology-Add-DAPM-object-parser.patch
  0042-topology-Add-CTL-parser.patch
  0043-topology-Add-Channel-map-parser.patch
  0044-topology-Add-binary-file-builder.patch
  0045-topology-autotools-Add-build-support-for-topology-co.patch
  0046-topology-doxygen-Add-doxygen-support-for-topology-co.patch
  0047-conf-topology-Add-topology-file-for-broadwell-audio-.patch
  0048-topology-Fix-missing-inclusion-of-ctype.h.patch
  0049-topology-Fix-typos.patch
- Enable autoreconf call to regenerate after patching</changelog>
<changelog author="tiwai@suse.de" date="1443787200">- Backport upsteram fixes: more topology API updates/fixes, misc
  documentation fixes, some logical error fixes in PCM plugins,
  LADSPA plugin segfault fix:
  0050-topology-fix-element-object-type-is-switch.patch
  0051-topology-Add-element-ID-so-we-can-look-up-references.patch
  0052-topology-Add-support-for-writing-manifest-private-da.patch
  0053-topology-update-ABI-to-improve-support-for-different.patch
  0054-topology-Add-ops-support-to-byte-control-objects.patch
  0055-topology-treat-all-DAPM-controls-types-the-same-when.patch
  0056-topology-print-error-prefix-on-error-message.patch
  0057-topology-rename-OBJECT_TYPE_-to-SND_TPLG_TYPE_.patch
  0058-core-add-convenience-macros-to-local.h.patch
  0059-topology-Add-C-templates-structure-for-building-topo.patch
  0060-topology-A-API-calls-to-directly-build-topology-data.patch
  0061-pcm-Fix-doxygen-for-two-enums.patch
  0062-pcm-ioplug-extplug-Fix-logic-errors-in-type-checks.patch
  0063-pcm-route-Remove-bogus-in-snd_config_get_id-checks.patch
  0064-topology-builder-Fix-possibly-uninitialized-variable.patch
  0065-topology-ctl-Fix-access-type-checks.patch
  0066-topology-data-Fix-wrong-size-check-in-tplg_parse_dat.patch
  0067-topology-parser-Add-missing-return-value-to-snd_tplg.patch
  0068-topology-pcm-Remove-unused-variables.patch
  0069-build-Do-not-try-to-detect-cross-compiler.patch
  0070-topology-Add-API-to-set-a-vendor-specific-version-nu.patch
  0071-pcm-ladspa-Fix-segfault-due-to-a-wrong-channel-refer.patch</changelog>
<changelog author="tiwai@suse.de" date="1447070400">- Fix PCM dmix/dsnoop XRUN handling in slave PCM (boo#954281):
  0072-pcm-dmix-Handle-slave-PCM-xrun-and-unexpected-states.patch
- Align topology API with the official alsa-lib 1.1.0 release
  (boo#954279):
  0073-topology-ABI-Add-name-element-to-snd_soc_tplg_stream.patch
  0074-topology-ABI-Separate-PCM-BE-CC-link-support-and-bum.patch
  0075-topology-ABI-Remove-tdm_slot-dai_fmt-from-snd_soc_tp.patch
  0076-topology-ABI-Remove-unused-struct-snd_soc_tplg_strea.patch
  0077-topology-ABI-Use-__le32-instead-of-__u32-in-snd_soc_.patch
  0078-topology-ABI-Change-stream-formats-to-a-bitwise-flag.patch
  0079-topology-ABI-Rename-dai_elems-to-pcm_elems-in-manife.patch
  0080-topology-Add-C-API-support-for-BE-and-CC-Links.patch
  0081-topology-Add-C-API-support-for-PCM.patch
  0082-topology-remove-little-endian-type-from-userspace-he.patch
  0083-topology-Add-missing-prototypes-for-new-functions.patch</changelog>

</package>

<package pkgid="400e82928470b7fcd3933e0cae8d2e779d2fe909955980a3e6a37d577286a486" name="libblkid-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="593d4cccdd730424d26a3c74a02379f7e4b129456c4216e0d83997ccaeba174e" name="libblkid-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="697405ab8577adffcf7ec93d55c512c7db5745086997e7739a86c95ba736bb35" name="libblkid1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="66733d12641388c3c0cbd3312ff9c08b5e3253718aeb36f5120a05a2218ff993" name="libblkid1-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="da01220ec896808dd2cacf58029af2f5bd03aebdcbfb520694698546cd9664cc" name="libblkid1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="1e3b9911f5bcc80a92d00b76cf7687fb8c834ac3e423ee5df17211e51ffe446d" name="libblkid1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="d2553c2bae962aea6e9a3fb9c1cf1878e193a6a175a207fecdd59c3ddae3a6fa" name="libipa_hbac-devel" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="c91356346a00a4ba9ea7a462c5adfab7d5ff9d9a0afea0f23a433a01e0d9c8c4" name="libipa_hbac0" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="3732021ddf36bebd420fa74e1c18acfe6a3ffaed547787a761df399aa6ab23f0" name="libipa_hbac0-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="124b4b3dfbf7d1fbc97c83b3247ed573bb953ede8203a1a47762108602a0cd90" name="libmount-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="82fcd9496e45bcdb50a804723b63c8aa755c5c43e3f49471d094d2e186011f05" name="libmount-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="8391bf06a5553c7290bffa01dfc183976b7437701f080f057617dbf53c20f255" name="libmount1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="caf1b0c1e11728c7ed8064e35b85517e157c85820d2e85652923ac7979cc5b50" name="libmount1-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="20ee65e067e3dc906a66994d403a18fef4f590790d111774afb89036d8ebf111" name="libmount1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="4051fddf37dbb61d44f4f42219c238135937fef1591c047f8b3f35d074d9b59d" name="libmount1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="1ff196c32ee11b0f46d24086839db10b8b4cb5ff097dbda0f2d9a74d301c4ad6" name="libopenssl-devel" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="463d9bcce8c89bfb58ebe0cdcc754f540246cdbf6c027913d2c583f26f26b81a" name="libopenssl-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="b2d0c594a4d5d20604ebab24fffefedb6e87b9741f24ecc9e699e6b2e2fdd74c" name="libopenssl1_0_0" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="fe687dca394552b4309930af0c9d901d71b069766ff4570de0ba2013ace8bcb4" name="libopenssl1_0_0-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="86735449ead1593784685574542851356b8507dde93df785752fa407c14207c8" name="libopenssl1_0_0-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="d0f60be613967ef825e02c8465538e9546b011cdb1768bac105c819967503a60" name="libopenssl1_0_0-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="5015ae999e8327309afdcc37aaeadbab625fae0b3205b52ee07404446e1a2adf" name="libopenssl1_0_0-hmac" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="76ea34f2b187afd1c8a60e89a26b080ca78664e0202fbee53f0ed185d9779b93" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="a4474045d0209e438dcc11c0d6cbfc75b31dbecbdad408eaf216e123598076c9" name="libosinfo" arch="src">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="3ce2a08e0150073e1ff92b80ffc2adcfcf3afebe563048dbf06dd1e62eaf3b56" name="libosinfo" arch="x86_64">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="7cb9858ecea591bc95eb3a968f6dff482ab34ce4ee0c9c0418d77b20c9563979" name="libosinfo-1_0-0" arch="x86_64">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="c2835d7f93cb2c9f67f4a47b7e0bbd4bed00dd0c8bea31184d886f7284a9d48a" name="libosinfo-1_0-0-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="8796bd09826ddbbb2ba41f22ad293b269cb480d21aec0d99b86482eb22e9ba67" name="libosinfo-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="61f7bb4d5b2bb7111f76e30a2a2dab9a82c6ab347b716942eb47f6e4d57db638" name="libosinfo-debugsource" arch="x86_64">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="e7f5da6580b19d972da196962ea0000ebb87c4e24485a69eaedbf4c71582c55b" name="libosinfo-devel" arch="x86_64">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="e11af4be4f647c8719af33403ddad255b12d7b6a6ab66111a8d0c730ec89914f" name="libosinfo-lang" arch="noarch">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="0ef6bef422f4b02020c282b4bea02153127ffa5e1d03c6cb93d642e3ebbf0f22" name="libply-boot-client2" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="6a28ce2a292c2b22a9ff2089f85f7ab922ce13db9f5962d8e5d5468c50f6ec7d" name="libply-boot-client2-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="e7e70934b1a6f63de847558384f7bbacecec3d450c817330b6d0d16ef9d920a8" name="libply-splash-core2" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="8666ea9149c1ede6fe34c3494280ed0932c555be46b1ea54b09913595c91b1c6" name="libply-splash-core2-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="9472f25f24fbb165fcd619b9fc964de0baf4a97ca5c268b571d6a33e3f5dbf51" name="libply-splash-graphics2" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="84613f5b76ac5758419d66c13c286f356f79d80f78623ff70ece72f57e0ee6f0" name="libply-splash-graphics2-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="d7f8b83539d75354b4e3bc2a1226c74943ab45d10b7272f90b53c9fe55f91c26" name="libply2" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="8f4ec266eb72d0da4194341840b1e32a8398c5853eae5d3d39f671ad454c5fa0" name="libply2-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="ae7998f104c0b40dc66add56475c57224f393ce3c8beda5db91979db93b3464a" name="libsmartcols-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="240e22e02038bdebc369797952f79eb735efe5677f92786a8e01acc6d2551202" name="libsmartcols1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="e4f2c45f53e0e3e6035e0a029a0a8c3aa62a1c10dde14c05fbe5fcb10d6b8347" name="libsmartcols1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="3aa8e060c37b96907ca6063b2a8d5b52453115c86562cc4f6ef457644d51c31a" name="libsss_idmap-devel" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="ce89d33d0adfede5dd32dfda199bc72b8e9f66ddb4c545839f5dcace1dd4bfeb" name="libsss_idmap0" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="ec4e9b75beb656504049bfbe8e83b20a2d7898a735bbe7cc561efdd4d15e380b" name="libsss_idmap0-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="46a8363da76afffa94afed4453b8c93daba659dfc90cfa3e298a84467bb60fe8" name="libsss_nss_idmap-devel" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="f52854f038661c717b95c6d078c40645103f824f43d311de84acedf75b7d8436" name="libsss_nss_idmap0" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="7a1da3a15311cd7994fe8a8bdde09d0e80a33dc3a5e450294982843e3fb2e664" name="libsss_nss_idmap0-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="ea1be0f565a6b3e84f7a4df6691732b5feea18980789ad18ff04a7e72d20db2c" name="libsss_sudo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="5173bbb3ecb6ee9c1c20285bf569fd1e679ad55c4468d0ae64e06129a17e6502" name="libsss_sudo-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="1119dce876ac6d16b312e6ba8cce3120fc17068a6c283c51bf459226e145dd87" name="libuuid-devel" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="4fe4980be46fdec2df1801b0ef5e0846fe3e922db18429d6b52242887057cf53" name="libuuid-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="4b0b1421c4a351a7fb92706d4efcfe87ca37ba492ebcaaddb8d755ea4a58ea9e" name="libuuid1" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="b45206f497ce66946d21698c36ab1e6f6e3bd928842dcea31fef7d913834b0c5" name="libuuid1-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="4c25f5fc20399466eb92f27e88f3fb9f4d3189aba1e54439b410d811a562f9e5" name="libuuid1-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="f78b8633ffdb1063a43b1ee2935d3e7d32f7bf5d1f21d971a6a66d072dafd194" name="libuuid1-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="17b378c488bb8cc29e4516979480c49d8319e0e856307a39259f51451f2cf626" name="md_monitor" arch="src">
    <version epoch="0" ver="6.2" rel="3.1"/>

<changelog author="hare@suse.de" date="1390564800">- Branched off from the mdadm package, version 5.0 (FATE#316685)</changelog>
<changelog author="hare@suse.de" date="1440763200">- Update to version 5.1
  * Fixup locking in dasd_monitor_thread (bnc#839559)
  * Fixup uninitialized variable
  * Close cli socket on error
  * Terminate string when reading from sysfs
  * Use MD in name in lookup_md_alias (bnc#876830)
- Update to version 5.2
  * Fixes from coverity
- Update to version 5.3
  * Skip devices not in state 'online' (bnc#920563)
  * Open MD device nodes read-only
  * Skip uninitialized devices during scanning
  * Fixup testcases for SLE12
- Update to version 6.0 to add zFCP support (FATE#319070)
  * Split off DASD support routines in separate file
  * Rework MD detection logic
  * Support multipath devices
  * Update some testcases for zFCP</changelog>
<changelog author="hare@suse.de" date="1442491200">- Set 'timeout' DASD attribute for recent kernels (bsc#943270)
- Fixup typo testcase_monitor_functions.sh</changelog>
<changelog author="hare@suse.de" date="1446724800">- Update to version 6.0:
  * Include zFCP support (FATE#319070)
  * Update scripts for zFCP
- Update to version 6.1:
  * Set 'timeout' DASD attribute correctly on newer kernels
- Update to version 6.2:
  * Include scripts to setup root on MD
  * Set 'failfast' attribute correctly on newer kernels
  * Call 'mdadm --wait' when shutdown array (bsc#951211)
  * Include workaround for bsc#953510
  * Open device nodes read-only (bsc#937340)
  * Use curl instead of wget
  * Fix I/O timeout handling to work with newer kernel
  * Include workaround for bug#937340</changelog>

</package>

<package pkgid="f9406033874d0a48c0bce71989ed6561f07e9b9abd662f6115b6aa9679bd40d0" name="md_monitor" arch="x86_64">
    <version epoch="0" ver="6.2" rel="3.1"/>

<changelog author="hare@suse.de" date="1390564800">- Branched off from the mdadm package, version 5.0 (FATE#316685)</changelog>
<changelog author="hare@suse.de" date="1440763200">- Update to version 5.1
  * Fixup locking in dasd_monitor_thread (bnc#839559)
  * Fixup uninitialized variable
  * Close cli socket on error
  * Terminate string when reading from sysfs
  * Use MD in name in lookup_md_alias (bnc#876830)
- Update to version 5.2
  * Fixes from coverity
- Update to version 5.3
  * Skip devices not in state 'online' (bnc#920563)
  * Open MD device nodes read-only
  * Skip uninitialized devices during scanning
  * Fixup testcases for SLE12
- Update to version 6.0 to add zFCP support (FATE#319070)
  * Split off DASD support routines in separate file
  * Rework MD detection logic
  * Support multipath devices
  * Update some testcases for zFCP</changelog>
<changelog author="hare@suse.de" date="1442491200">- Set 'timeout' DASD attribute for recent kernels (bsc#943270)
- Fixup typo testcase_monitor_functions.sh</changelog>
<changelog author="hare@suse.de" date="1446724800">- Update to version 6.0:
  * Include zFCP support (FATE#319070)
  * Update scripts for zFCP
- Update to version 6.1:
  * Set 'timeout' DASD attribute correctly on newer kernels
- Update to version 6.2:
  * Include scripts to setup root on MD
  * Set 'failfast' attribute correctly on newer kernels
  * Call 'mdadm --wait' when shutdown array (bsc#951211)
  * Include workaround for bsc#953510
  * Open device nodes read-only (bsc#937340)
  * Use curl instead of wget
  * Fix I/O timeout handling to work with newer kernel
  * Include workaround for bug#937340</changelog>

</package>

<package pkgid="1bf91d4044aa4b119e75babbd2701c6c471fb00c6863255071115011d02a5f71" name="md_monitor-debuginfo" arch="x86_64">
    <version epoch="0" ver="6.2" rel="3.1"/>

<changelog author="hare@suse.de" date="1390564800">- Branched off from the mdadm package, version 5.0 (FATE#316685)</changelog>
<changelog author="hare@suse.de" date="1440763200">- Update to version 5.1
  * Fixup locking in dasd_monitor_thread (bnc#839559)
  * Fixup uninitialized variable
  * Close cli socket on error
  * Terminate string when reading from sysfs
  * Use MD in name in lookup_md_alias (bnc#876830)
- Update to version 5.2
  * Fixes from coverity
- Update to version 5.3
  * Skip devices not in state 'online' (bnc#920563)
  * Open MD device nodes read-only
  * Skip uninitialized devices during scanning
  * Fixup testcases for SLE12
- Update to version 6.0 to add zFCP support (FATE#319070)
  * Split off DASD support routines in separate file
  * Rework MD detection logic
  * Support multipath devices
  * Update some testcases for zFCP</changelog>
<changelog author="hare@suse.de" date="1442491200">- Set 'timeout' DASD attribute for recent kernels (bsc#943270)
- Fixup typo testcase_monitor_functions.sh</changelog>
<changelog author="hare@suse.de" date="1446724800">- Update to version 6.0:
  * Include zFCP support (FATE#319070)
  * Update scripts for zFCP
- Update to version 6.1:
  * Set 'timeout' DASD attribute correctly on newer kernels
- Update to version 6.2:
  * Include scripts to setup root on MD
  * Set 'failfast' attribute correctly on newer kernels
  * Call 'mdadm --wait' when shutdown array (bsc#951211)
  * Include workaround for bsc#953510
  * Open device nodes read-only (bsc#937340)
  * Use curl instead of wget
  * Fix I/O timeout handling to work with newer kernel
  * Include workaround for bug#937340</changelog>

</package>

<package pkgid="52805e41d0e365f636f5815ca397f2d016ee78024c1ad5314b5bcd5df6d25864" name="md_monitor-debugsource" arch="x86_64">
    <version epoch="0" ver="6.2" rel="3.1"/>

<changelog author="hare@suse.de" date="1390564800">- Branched off from the mdadm package, version 5.0 (FATE#316685)</changelog>
<changelog author="hare@suse.de" date="1440763200">- Update to version 5.1
  * Fixup locking in dasd_monitor_thread (bnc#839559)
  * Fixup uninitialized variable
  * Close cli socket on error
  * Terminate string when reading from sysfs
  * Use MD in name in lookup_md_alias (bnc#876830)
- Update to version 5.2
  * Fixes from coverity
- Update to version 5.3
  * Skip devices not in state 'online' (bnc#920563)
  * Open MD device nodes read-only
  * Skip uninitialized devices during scanning
  * Fixup testcases for SLE12
- Update to version 6.0 to add zFCP support (FATE#319070)
  * Split off DASD support routines in separate file
  * Rework MD detection logic
  * Support multipath devices
  * Update some testcases for zFCP</changelog>
<changelog author="hare@suse.de" date="1442491200">- Set 'timeout' DASD attribute for recent kernels (bsc#943270)
- Fixup typo testcase_monitor_functions.sh</changelog>
<changelog author="hare@suse.de" date="1446724800">- Update to version 6.0:
  * Include zFCP support (FATE#319070)
  * Update scripts for zFCP
- Update to version 6.1:
  * Set 'timeout' DASD attribute correctly on newer kernels
- Update to version 6.2:
  * Include scripts to setup root on MD
  * Set 'failfast' attribute correctly on newer kernels
  * Call 'mdadm --wait' when shutdown array (bsc#951211)
  * Include workaround for bsc#953510
  * Open device nodes read-only (bsc#937340)
  * Use curl instead of wget
  * Fix I/O timeout handling to work with newer kernel
  * Include workaround for bug#937340</changelog>

</package>

<package pkgid="b33171d00885d1ef12df10a0da9ec5bb2a84be5a6b96003da95cbbdbb82097e9" name="multipath-tools" arch="src">
    <version epoch="0" ver="0.5.0" rel="50.1"/>

<changelog author="hare@suse.de" date="1407931200">- Do not remove paths without uevent (bnc#890998)</changelog>
<changelog author="hare@suse.de" date="1408363200">- Fixup device-mapper cookie handling yet again (bnc#890902)
- Allow zero-sized devices during configuration
- multipathd: issue warning on CLI command timeout (bnc#891189)</changelog>
<changelog author="hare@suse.de" date="1408449600">- Use strlen() when checking for valid wwid
- kpartx: zero out cookie (bnc#890902)
- multipathd: Check for empty wwid when processing events
  (bnc#892214)</changelog>
<changelog author="hare@suse.de" date="1408622400">- Revert to ACT_RELOAD in domap() if the map exists
- multipathd: asynchronous configuration (bnc#891189)
- multipathd: timeout CLI commands when waiting for lock
  (bnc#891189)
- Remove dm_udev_XXX wrapper functions
- uxlsnr: use typedef for trigger function
- multipathd: lock cli client list
- multipathd: Use standard lists for CLI handling</changelog>
<changelog author="hare@suse.de" date="1409313600">- Fixup segfault during uev_path_add() (bnc#892214)</changelog>
<changelog author="trenn@suse.de" date="1409659200">- Do not call mkinitrd in rpm macros directly, make use of
  %{?regenerate_initrd_posttrans} and %{?regenerate_initrd_post}
  instead to avoid rebuilding of initrd for each package that
  needs initrd recreation. Only update initrd once per install/update
  if needed</changelog>
<changelog author="hare@suse.de" date="1409745600">- Create rcmultipathd links (bnc#894513)
- multipathd: fix segfault in checkerloop() (bnc#894513)
- Use regenerate_posttrans rpm macros (bnc#892181)</changelog>
<changelog author="hare@suse.de" date="1409745601">- Fixup segfault due to double unlock
- Skip USB devices during discovery (bnc#865577)
- Ignore devices when sysfs_get_tgt_nodename fails (bnc#865577)
- Use sysfs attribute vpd_pg80 to read serial number</changelog>
<changelog author="hare@suse.de" date="1410955200">- Fix segfault in recv_packet (bnc#896678)</changelog>
<changelog author="hare@suse.de" date="1411387200">- Really fix segfault in recv_packet (bnc#896678)
- Allow empty revision during discovery (bnc#896864)</changelog>
<changelog author="hare@suse.de" date="1418212800">- libmultipath: Fall back to SG_IO if no UID could be assigned
  (bnc#908915)
- Assign local priority for NAA VPD descriptor (bnc#907483)
- libmultipath: finally fix dev_loss_tmo setting (bnc#889927)
- libmultipath: Do not use 'sscanf' for parsing integers (bnc#889927)
- devmapper: do not flush I/O for DM_DEVICE_CREATE (bnc#901809)
- kpartx: handle more than 256 loop devices (bnc#898427)
- multipathd: fixup locking in uev_remove_map() (bnc#901891)
- multipathd: use global variable for uxsock timeout (bnc#900758)
- multipathd: remove unused variable in cli_reconfigure()
- Add %service calls for multipathd.socket</changelog>
<changelog author="hare@suse.de" date="1418731200">- Do not automatically fall back to vpd uid generation
- Improve vpd parsing
- multipathd: trigger all devices on startup (bnc#901465)
- Unset 'uid_attribute' on failure</changelog>
<changelog author="hare@suse.de" date="1422532800">- skip uninitialized devices during reconfiguration (bnc#908915)
- memory overflow when printing help text (bnc#909742)</changelog>
<changelog author="hare@suse.de" date="1426248000">- libmultipath: make vpd page 0x80 optional (bsc#917963)
- Add HP MSA 2040 to the hardware table (bsc#920189)
- Revert 'Skip unhandled device types' (bsc#917701)</changelog>
<changelog author="hare@suse.de" date="1426680000">- Add dependency on systemd-udevd.service (bsc#903001)
- Use ALUA for HP 3PAR (bsc#922105)
- Add DX8700 S3 and DX8900 S3 defaults (bsc#921703)
- Load all device handler modules on startup (bsc#908529)</changelog>
<changelog author="hare@suse.de" date="1428408000">- Only import ID_FS_XXX variables if not set (bsc#909358)
- Fixup regular expression for HP MSA 2040 (bsc#920189)</changelog>
<changelog author="hare@suse.de" date="1428494400">- Remove 'udev_sync' argument from dm_simplecmd (bsc#903001)
- Ensure multipathd is started before systemd-udev-trigger</changelog>
<changelog author="hare@suse.de" date="1438603200">- Create package for SLE12-SP1.
  * Remove multipath-tools-0.5.0-sles12.diff.bz2
  * Add multipath-tools-0.5.0-sles12-sp1.diff.bz2
- kpartx: parse emulated DASD devices
- multipathd: Fixup queueing mode in 'show maps status' (bsc#933885)
- multipathd: Accept zero-sized paths in ev_add_path
- Always set DM_UDEV_DISABLE_LIBRARY_FALLBACK (bsc#933282)
- libmultipath: Fixup 'DM_DEVICE_RELOAD' handling (bsc#933282)
- libmultipath: correctly display checker status</changelog>
<changelog author="hare@suse.de" date="1440504000">- Fixup hang in 'multipath -f' (bsc#941954)</changelog>
<changelog author="hare@suse.de" date="1446811200">- Fixes for md_monitor on zFCP (FATE#319070):
  * strict loop timings
  * multipathd: fixup a crash when invoking CLI commands
  * multipathd: implement 'show map $map format $format</changelog>

</package>

<package pkgid="8e06dbdce9fd5318e47268ffb68c2a5a05420ecf8a3178325a84764ee7c325d7" name="multipath-tools" arch="x86_64">
    <version epoch="0" ver="0.5.0" rel="50.1"/>

<changelog author="hare@suse.de" date="1407931200">- Do not remove paths without uevent (bnc#890998)</changelog>
<changelog author="hare@suse.de" date="1408363200">- Fixup device-mapper cookie handling yet again (bnc#890902)
- Allow zero-sized devices during configuration
- multipathd: issue warning on CLI command timeout (bnc#891189)</changelog>
<changelog author="hare@suse.de" date="1408449600">- Use strlen() when checking for valid wwid
- kpartx: zero out cookie (bnc#890902)
- multipathd: Check for empty wwid when processing events
  (bnc#892214)</changelog>
<changelog author="hare@suse.de" date="1408622400">- Revert to ACT_RELOAD in domap() if the map exists
- multipathd: asynchronous configuration (bnc#891189)
- multipathd: timeout CLI commands when waiting for lock
  (bnc#891189)
- Remove dm_udev_XXX wrapper functions
- uxlsnr: use typedef for trigger function
- multipathd: lock cli client list
- multipathd: Use standard lists for CLI handling</changelog>
<changelog author="hare@suse.de" date="1409313600">- Fixup segfault during uev_path_add() (bnc#892214)</changelog>
<changelog author="trenn@suse.de" date="1409659200">- Do not call mkinitrd in rpm macros directly, make use of
  %{?regenerate_initrd_posttrans} and %{?regenerate_initrd_post}
  instead to avoid rebuilding of initrd for each package that
  needs initrd recreation. Only update initrd once per install/update
  if needed</changelog>
<changelog author="hare@suse.de" date="1409745600">- Create rcmultipathd links (bnc#894513)
- multipathd: fix segfault in checkerloop() (bnc#894513)
- Use regenerate_posttrans rpm macros (bnc#892181)</changelog>
<changelog author="hare@suse.de" date="1409745601">- Fixup segfault due to double unlock
- Skip USB devices during discovery (bnc#865577)
- Ignore devices when sysfs_get_tgt_nodename fails (bnc#865577)
- Use sysfs attribute vpd_pg80 to read serial number</changelog>
<changelog author="hare@suse.de" date="1410955200">- Fix segfault in recv_packet (bnc#896678)</changelog>
<changelog author="hare@suse.de" date="1411387200">- Really fix segfault in recv_packet (bnc#896678)
- Allow empty revision during discovery (bnc#896864)</changelog>
<changelog author="hare@suse.de" date="1418212800">- libmultipath: Fall back to SG_IO if no UID could be assigned
  (bnc#908915)
- Assign local priority for NAA VPD descriptor (bnc#907483)
- libmultipath: finally fix dev_loss_tmo setting (bnc#889927)
- libmultipath: Do not use 'sscanf' for parsing integers (bnc#889927)
- devmapper: do not flush I/O for DM_DEVICE_CREATE (bnc#901809)
- kpartx: handle more than 256 loop devices (bnc#898427)
- multipathd: fixup locking in uev_remove_map() (bnc#901891)
- multipathd: use global variable for uxsock timeout (bnc#900758)
- multipathd: remove unused variable in cli_reconfigure()
- Add %service calls for multipathd.socket</changelog>
<changelog author="hare@suse.de" date="1418731200">- Do not automatically fall back to vpd uid generation
- Improve vpd parsing
- multipathd: trigger all devices on startup (bnc#901465)
- Unset 'uid_attribute' on failure</changelog>
<changelog author="hare@suse.de" date="1422532800">- skip uninitialized devices during reconfiguration (bnc#908915)
- memory overflow when printing help text (bnc#909742)</changelog>
<changelog author="hare@suse.de" date="1426248000">- libmultipath: make vpd page 0x80 optional (bsc#917963)
- Add HP MSA 2040 to the hardware table (bsc#920189)
- Revert 'Skip unhandled device types' (bsc#917701)</changelog>
<changelog author="hare@suse.de" date="1426680000">- Add dependency on systemd-udevd.service (bsc#903001)
- Use ALUA for HP 3PAR (bsc#922105)
- Add DX8700 S3 and DX8900 S3 defaults (bsc#921703)
- Load all device handler modules on startup (bsc#908529)</changelog>
<changelog author="hare@suse.de" date="1428408000">- Only import ID_FS_XXX variables if not set (bsc#909358)
- Fixup regular expression for HP MSA 2040 (bsc#920189)</changelog>
<changelog author="hare@suse.de" date="1428494400">- Remove 'udev_sync' argument from dm_simplecmd (bsc#903001)
- Ensure multipathd is started before systemd-udev-trigger</changelog>
<changelog author="hare@suse.de" date="1438603200">- Create package for SLE12-SP1.
  * Remove multipath-tools-0.5.0-sles12.diff.bz2
  * Add multipath-tools-0.5.0-sles12-sp1.diff.bz2
- kpartx: parse emulated DASD devices
- multipathd: Fixup queueing mode in 'show maps status' (bsc#933885)
- multipathd: Accept zero-sized paths in ev_add_path
- Always set DM_UDEV_DISABLE_LIBRARY_FALLBACK (bsc#933282)
- libmultipath: Fixup 'DM_DEVICE_RELOAD' handling (bsc#933282)
- libmultipath: correctly display checker status</changelog>
<changelog author="hare@suse.de" date="1440504000">- Fixup hang in 'multipath -f' (bsc#941954)</changelog>
<changelog author="hare@suse.de" date="1446811200">- Fixes for md_monitor on zFCP (FATE#319070):
  * strict loop timings
  * multipathd: fixup a crash when invoking CLI commands
  * multipathd: implement 'show map $map format $format</changelog>

</package>

<package pkgid="4abd459c476234a1b741b7adbb0ec3bc6fc6447b08e1a61b09aaf1caa772b10d" name="multipath-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.5.0" rel="50.1"/>

<changelog author="hare@suse.de" date="1407931200">- Do not remove paths without uevent (bnc#890998)</changelog>
<changelog author="hare@suse.de" date="1408363200">- Fixup device-mapper cookie handling yet again (bnc#890902)
- Allow zero-sized devices during configuration
- multipathd: issue warning on CLI command timeout (bnc#891189)</changelog>
<changelog author="hare@suse.de" date="1408449600">- Use strlen() when checking for valid wwid
- kpartx: zero out cookie (bnc#890902)
- multipathd: Check for empty wwid when processing events
  (bnc#892214)</changelog>
<changelog author="hare@suse.de" date="1408622400">- Revert to ACT_RELOAD in domap() if the map exists
- multipathd: asynchronous configuration (bnc#891189)
- multipathd: timeout CLI commands when waiting for lock
  (bnc#891189)
- Remove dm_udev_XXX wrapper functions
- uxlsnr: use typedef for trigger function
- multipathd: lock cli client list
- multipathd: Use standard lists for CLI handling</changelog>
<changelog author="hare@suse.de" date="1409313600">- Fixup segfault during uev_path_add() (bnc#892214)</changelog>
<changelog author="trenn@suse.de" date="1409659200">- Do not call mkinitrd in rpm macros directly, make use of
  %{?regenerate_initrd_posttrans} and %{?regenerate_initrd_post}
  instead to avoid rebuilding of initrd for each package that
  needs initrd recreation. Only update initrd once per install/update
  if needed</changelog>
<changelog author="hare@suse.de" date="1409745600">- Create rcmultipathd links (bnc#894513)
- multipathd: fix segfault in checkerloop() (bnc#894513)
- Use regenerate_posttrans rpm macros (bnc#892181)</changelog>
<changelog author="hare@suse.de" date="1409745601">- Fixup segfault due to double unlock
- Skip USB devices during discovery (bnc#865577)
- Ignore devices when sysfs_get_tgt_nodename fails (bnc#865577)
- Use sysfs attribute vpd_pg80 to read serial number</changelog>
<changelog author="hare@suse.de" date="1410955200">- Fix segfault in recv_packet (bnc#896678)</changelog>
<changelog author="hare@suse.de" date="1411387200">- Really fix segfault in recv_packet (bnc#896678)
- Allow empty revision during discovery (bnc#896864)</changelog>
<changelog author="hare@suse.de" date="1418212800">- libmultipath: Fall back to SG_IO if no UID could be assigned
  (bnc#908915)
- Assign local priority for NAA VPD descriptor (bnc#907483)
- libmultipath: finally fix dev_loss_tmo setting (bnc#889927)
- libmultipath: Do not use 'sscanf' for parsing integers (bnc#889927)
- devmapper: do not flush I/O for DM_DEVICE_CREATE (bnc#901809)
- kpartx: handle more than 256 loop devices (bnc#898427)
- multipathd: fixup locking in uev_remove_map() (bnc#901891)
- multipathd: use global variable for uxsock timeout (bnc#900758)
- multipathd: remove unused variable in cli_reconfigure()
- Add %service calls for multipathd.socket</changelog>
<changelog author="hare@suse.de" date="1418731200">- Do not automatically fall back to vpd uid generation
- Improve vpd parsing
- multipathd: trigger all devices on startup (bnc#901465)
- Unset 'uid_attribute' on failure</changelog>
<changelog author="hare@suse.de" date="1422532800">- skip uninitialized devices during reconfiguration (bnc#908915)
- memory overflow when printing help text (bnc#909742)</changelog>
<changelog author="hare@suse.de" date="1426248000">- libmultipath: make vpd page 0x80 optional (bsc#917963)
- Add HP MSA 2040 to the hardware table (bsc#920189)
- Revert 'Skip unhandled device types' (bsc#917701)</changelog>
<changelog author="hare@suse.de" date="1426680000">- Add dependency on systemd-udevd.service (bsc#903001)
- Use ALUA for HP 3PAR (bsc#922105)
- Add DX8700 S3 and DX8900 S3 defaults (bsc#921703)
- Load all device handler modules on startup (bsc#908529)</changelog>
<changelog author="hare@suse.de" date="1428408000">- Only import ID_FS_XXX variables if not set (bsc#909358)
- Fixup regular expression for HP MSA 2040 (bsc#920189)</changelog>
<changelog author="hare@suse.de" date="1428494400">- Remove 'udev_sync' argument from dm_simplecmd (bsc#903001)
- Ensure multipathd is started before systemd-udev-trigger</changelog>
<changelog author="hare@suse.de" date="1438603200">- Create package for SLE12-SP1.
  * Remove multipath-tools-0.5.0-sles12.diff.bz2
  * Add multipath-tools-0.5.0-sles12-sp1.diff.bz2
- kpartx: parse emulated DASD devices
- multipathd: Fixup queueing mode in 'show maps status' (bsc#933885)
- multipathd: Accept zero-sized paths in ev_add_path
- Always set DM_UDEV_DISABLE_LIBRARY_FALLBACK (bsc#933282)
- libmultipath: Fixup 'DM_DEVICE_RELOAD' handling (bsc#933282)
- libmultipath: correctly display checker status</changelog>
<changelog author="hare@suse.de" date="1440504000">- Fixup hang in 'multipath -f' (bsc#941954)</changelog>
<changelog author="hare@suse.de" date="1446811200">- Fixes for md_monitor on zFCP (FATE#319070):
  * strict loop timings
  * multipathd: fixup a crash when invoking CLI commands
  * multipathd: implement 'show map $map format $format</changelog>

</package>

<package pkgid="22ea2dccc04dba65e9128605a46b9cdd9dfc53fec7e806ca1e5ee14f86171185" name="multipath-tools-debugsource" arch="x86_64">
    <version epoch="0" ver="0.5.0" rel="50.1"/>

<changelog author="hare@suse.de" date="1407931200">- Do not remove paths without uevent (bnc#890998)</changelog>
<changelog author="hare@suse.de" date="1408363200">- Fixup device-mapper cookie handling yet again (bnc#890902)
- Allow zero-sized devices during configuration
- multipathd: issue warning on CLI command timeout (bnc#891189)</changelog>
<changelog author="hare@suse.de" date="1408449600">- Use strlen() when checking for valid wwid
- kpartx: zero out cookie (bnc#890902)
- multipathd: Check for empty wwid when processing events
  (bnc#892214)</changelog>
<changelog author="hare@suse.de" date="1408622400">- Revert to ACT_RELOAD in domap() if the map exists
- multipathd: asynchronous configuration (bnc#891189)
- multipathd: timeout CLI commands when waiting for lock
  (bnc#891189)
- Remove dm_udev_XXX wrapper functions
- uxlsnr: use typedef for trigger function
- multipathd: lock cli client list
- multipathd: Use standard lists for CLI handling</changelog>
<changelog author="hare@suse.de" date="1409313600">- Fixup segfault during uev_path_add() (bnc#892214)</changelog>
<changelog author="trenn@suse.de" date="1409659200">- Do not call mkinitrd in rpm macros directly, make use of
  %{?regenerate_initrd_posttrans} and %{?regenerate_initrd_post}
  instead to avoid rebuilding of initrd for each package that
  needs initrd recreation. Only update initrd once per install/update
  if needed</changelog>
<changelog author="hare@suse.de" date="1409745600">- Create rcmultipathd links (bnc#894513)
- multipathd: fix segfault in checkerloop() (bnc#894513)
- Use regenerate_posttrans rpm macros (bnc#892181)</changelog>
<changelog author="hare@suse.de" date="1409745601">- Fixup segfault due to double unlock
- Skip USB devices during discovery (bnc#865577)
- Ignore devices when sysfs_get_tgt_nodename fails (bnc#865577)
- Use sysfs attribute vpd_pg80 to read serial number</changelog>
<changelog author="hare@suse.de" date="1410955200">- Fix segfault in recv_packet (bnc#896678)</changelog>
<changelog author="hare@suse.de" date="1411387200">- Really fix segfault in recv_packet (bnc#896678)
- Allow empty revision during discovery (bnc#896864)</changelog>
<changelog author="hare@suse.de" date="1418212800">- libmultipath: Fall back to SG_IO if no UID could be assigned
  (bnc#908915)
- Assign local priority for NAA VPD descriptor (bnc#907483)
- libmultipath: finally fix dev_loss_tmo setting (bnc#889927)
- libmultipath: Do not use 'sscanf' for parsing integers (bnc#889927)
- devmapper: do not flush I/O for DM_DEVICE_CREATE (bnc#901809)
- kpartx: handle more than 256 loop devices (bnc#898427)
- multipathd: fixup locking in uev_remove_map() (bnc#901891)
- multipathd: use global variable for uxsock timeout (bnc#900758)
- multipathd: remove unused variable in cli_reconfigure()
- Add %service calls for multipathd.socket</changelog>
<changelog author="hare@suse.de" date="1418731200">- Do not automatically fall back to vpd uid generation
- Improve vpd parsing
- multipathd: trigger all devices on startup (bnc#901465)
- Unset 'uid_attribute' on failure</changelog>
<changelog author="hare@suse.de" date="1422532800">- skip uninitialized devices during reconfiguration (bnc#908915)
- memory overflow when printing help text (bnc#909742)</changelog>
<changelog author="hare@suse.de" date="1426248000">- libmultipath: make vpd page 0x80 optional (bsc#917963)
- Add HP MSA 2040 to the hardware table (bsc#920189)
- Revert 'Skip unhandled device types' (bsc#917701)</changelog>
<changelog author="hare@suse.de" date="1426680000">- Add dependency on systemd-udevd.service (bsc#903001)
- Use ALUA for HP 3PAR (bsc#922105)
- Add DX8700 S3 and DX8900 S3 defaults (bsc#921703)
- Load all device handler modules on startup (bsc#908529)</changelog>
<changelog author="hare@suse.de" date="1428408000">- Only import ID_FS_XXX variables if not set (bsc#909358)
- Fixup regular expression for HP MSA 2040 (bsc#920189)</changelog>
<changelog author="hare@suse.de" date="1428494400">- Remove 'udev_sync' argument from dm_simplecmd (bsc#903001)
- Ensure multipathd is started before systemd-udev-trigger</changelog>
<changelog author="hare@suse.de" date="1438603200">- Create package for SLE12-SP1.
  * Remove multipath-tools-0.5.0-sles12.diff.bz2
  * Add multipath-tools-0.5.0-sles12-sp1.diff.bz2
- kpartx: parse emulated DASD devices
- multipathd: Fixup queueing mode in 'show maps status' (bsc#933885)
- multipathd: Accept zero-sized paths in ev_add_path
- Always set DM_UDEV_DISABLE_LIBRARY_FALLBACK (bsc#933282)
- libmultipath: Fixup 'DM_DEVICE_RELOAD' handling (bsc#933282)
- libmultipath: correctly display checker status</changelog>
<changelog author="hare@suse.de" date="1440504000">- Fixup hang in 'multipath -f' (bsc#941954)</changelog>
<changelog author="hare@suse.de" date="1446811200">- Fixes for md_monitor on zFCP (FATE#319070):
  * strict loop timings
  * multipathd: fixup a crash when invoking CLI commands
  * multipathd: implement 'show map $map format $format</changelog>

</package>

<package pkgid="7f3fda8a89ede370b74ea39296ab230f2f816f4dad0f7ed5d38e4c13af0d5acc" name="multipath-tools-devel" arch="x86_64">
    <version epoch="0" ver="0.5.0" rel="50.1"/>

<changelog author="hare@suse.de" date="1407931200">- Do not remove paths without uevent (bnc#890998)</changelog>
<changelog author="hare@suse.de" date="1408363200">- Fixup device-mapper cookie handling yet again (bnc#890902)
- Allow zero-sized devices during configuration
- multipathd: issue warning on CLI command timeout (bnc#891189)</changelog>
<changelog author="hare@suse.de" date="1408449600">- Use strlen() when checking for valid wwid
- kpartx: zero out cookie (bnc#890902)
- multipathd: Check for empty wwid when processing events
  (bnc#892214)</changelog>
<changelog author="hare@suse.de" date="1408622400">- Revert to ACT_RELOAD in domap() if the map exists
- multipathd: asynchronous configuration (bnc#891189)
- multipathd: timeout CLI commands when waiting for lock
  (bnc#891189)
- Remove dm_udev_XXX wrapper functions
- uxlsnr: use typedef for trigger function
- multipathd: lock cli client list
- multipathd: Use standard lists for CLI handling</changelog>
<changelog author="hare@suse.de" date="1409313600">- Fixup segfault during uev_path_add() (bnc#892214)</changelog>
<changelog author="trenn@suse.de" date="1409659200">- Do not call mkinitrd in rpm macros directly, make use of
  %{?regenerate_initrd_posttrans} and %{?regenerate_initrd_post}
  instead to avoid rebuilding of initrd for each package that
  needs initrd recreation. Only update initrd once per install/update
  if needed</changelog>
<changelog author="hare@suse.de" date="1409745600">- Create rcmultipathd links (bnc#894513)
- multipathd: fix segfault in checkerloop() (bnc#894513)
- Use regenerate_posttrans rpm macros (bnc#892181)</changelog>
<changelog author="hare@suse.de" date="1409745601">- Fixup segfault due to double unlock
- Skip USB devices during discovery (bnc#865577)
- Ignore devices when sysfs_get_tgt_nodename fails (bnc#865577)
- Use sysfs attribute vpd_pg80 to read serial number</changelog>
<changelog author="hare@suse.de" date="1410955200">- Fix segfault in recv_packet (bnc#896678)</changelog>
<changelog author="hare@suse.de" date="1411387200">- Really fix segfault in recv_packet (bnc#896678)
- Allow empty revision during discovery (bnc#896864)</changelog>
<changelog author="hare@suse.de" date="1418212800">- libmultipath: Fall back to SG_IO if no UID could be assigned
  (bnc#908915)
- Assign local priority for NAA VPD descriptor (bnc#907483)
- libmultipath: finally fix dev_loss_tmo setting (bnc#889927)
- libmultipath: Do not use 'sscanf' for parsing integers (bnc#889927)
- devmapper: do not flush I/O for DM_DEVICE_CREATE (bnc#901809)
- kpartx: handle more than 256 loop devices (bnc#898427)
- multipathd: fixup locking in uev_remove_map() (bnc#901891)
- multipathd: use global variable for uxsock timeout (bnc#900758)
- multipathd: remove unused variable in cli_reconfigure()
- Add %service calls for multipathd.socket</changelog>
<changelog author="hare@suse.de" date="1418731200">- Do not automatically fall back to vpd uid generation
- Improve vpd parsing
- multipathd: trigger all devices on startup (bnc#901465)
- Unset 'uid_attribute' on failure</changelog>
<changelog author="hare@suse.de" date="1422532800">- skip uninitialized devices during reconfiguration (bnc#908915)
- memory overflow when printing help text (bnc#909742)</changelog>
<changelog author="hare@suse.de" date="1426248000">- libmultipath: make vpd page 0x80 optional (bsc#917963)
- Add HP MSA 2040 to the hardware table (bsc#920189)
- Revert 'Skip unhandled device types' (bsc#917701)</changelog>
<changelog author="hare@suse.de" date="1426680000">- Add dependency on systemd-udevd.service (bsc#903001)
- Use ALUA for HP 3PAR (bsc#922105)
- Add DX8700 S3 and DX8900 S3 defaults (bsc#921703)
- Load all device handler modules on startup (bsc#908529)</changelog>
<changelog author="hare@suse.de" date="1428408000">- Only import ID_FS_XXX variables if not set (bsc#909358)
- Fixup regular expression for HP MSA 2040 (bsc#920189)</changelog>
<changelog author="hare@suse.de" date="1428494400">- Remove 'udev_sync' argument from dm_simplecmd (bsc#903001)
- Ensure multipathd is started before systemd-udev-trigger</changelog>
<changelog author="hare@suse.de" date="1438603200">- Create package for SLE12-SP1.
  * Remove multipath-tools-0.5.0-sles12.diff.bz2
  * Add multipath-tools-0.5.0-sles12-sp1.diff.bz2
- kpartx: parse emulated DASD devices
- multipathd: Fixup queueing mode in 'show maps status' (bsc#933885)
- multipathd: Accept zero-sized paths in ev_add_path
- Always set DM_UDEV_DISABLE_LIBRARY_FALLBACK (bsc#933282)
- libmultipath: Fixup 'DM_DEVICE_RELOAD' handling (bsc#933282)
- libmultipath: correctly display checker status</changelog>
<changelog author="hare@suse.de" date="1440504000">- Fixup hang in 'multipath -f' (bsc#941954)</changelog>
<changelog author="hare@suse.de" date="1446811200">- Fixes for md_monitor on zFCP (FATE#319070):
  * strict loop timings
  * multipathd: fixup a crash when invoking CLI commands
  * multipathd: implement 'show map $map format $format</changelog>

</package>

<package pkgid="72f9040495083c9b79440e39cf9d83108715cef93ec3a9a6ccc002822a184090" name="ntp" arch="src">
    <version epoch="0" ver="4.2.8p4" rel="9.2"/>

<changelog author="seife+obs@b1-systems.com" date="1397908800">- fix "start-ntp addserver": start-ntp has no "status" method</changelog>
<changelog author="max@suse.com" date="1398772800">- Remove /var/run/ntp from the package:
  http://lists.opensuse.org/opensuse-packaging/2014-04/msg00046.html
- Fix Provides/Obsoletes of package aliases.
- Add /usr/sbin/rc* links.
- Stay enabled across sysv to systemd migrations (bnc#875490).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1399291200">- fix start-ntpd again: service is now called ntpd, not ntp</changelog>
<changelog author="max@suse.com" date="1402574400">- Forward-port some bugs that got fixed for SLE11 (bnc#831311):
  * bnc#817893
  * bnc#482349</changelog>
<changelog author="max@suse.com" date="1411732800">- Re-enable the ntptimeset legacy init script action (bnc#893406).</changelog>
<changelog author="meissner@suse.com" date="1416312000">- ntp-fips-reenablemd5.patch: Reenable use of legacy MD5 in fips mode.
  bnc#898596</changelog>
<changelog author="max@suse.com" date="1418990400">- bnc#910764: VU#852879 ntp security fixes
  * A potential remote code execution problem was found inside
    ntpd. The functions crypto_recv() (when using autokey
    authentication), ctl_putdata(), and configure() where updated
    to avoid buffer overflows that could be
    exploited. (CVE-2014-9295)
  * Furthermore a problem inside the ntpd error handling was found
    that is missing a return statement. This could also lead to a
    potentially attack vector. (CVE-2014-9296)</changelog>
<changelog author="max@suse.com" date="1421409600">- bnc#910764:
  * CVE-2014-9293: Weak default key in config_auth()
  * CVE-2014-9294: ntp-keygen uses weak random number generator
    seed when generating MD5 keys.</changelog>
<changelog author="max@suse.com" date="1422964800">- bnc#911792: Security backport from ntp-4.2.8p1:
- NTP Bug 2671, CVE-2014-9297 - vallen is not validated in several
  places in ntp_crypto.c, leading to potential info leak.</changelog>
<changelog author="max@suse.com" date="1423483200">- NTP Bug 2672, CVE-2014-9298: ::1 can be spoofed on some OSes, so
  ACLs based on IPv6 ::1 addresses can be bypassed.</changelog>
<changelog author="max@suse.com" date="1426248000">- Fix slew mode for leap seconds (bnc#918342).</changelog>
<changelog author="meissner@suse.com" date="1428408000">- security update bsc#924202 / VU#374268
  - ntp-CVE-2015-1798.patch: CVE-2015-1798: NTP Bug 2779: ntpd accepts
    unauthenticated packets with symmetric key crypto.
  - ntp-CVE-2015-1799.patch: CVE-2015-1799: NTP Bug 2781:  Authentication
    doesn't protect symmetric associations against DoS attacks.</changelog>
<changelog author="max@suse.com" date="1430136000">- Security fix: ntp-keygen may generate non-random symmetric keys
  on big-endian systems (bsc#928321, CVE-2015-3405).</changelog>
<changelog author="max@suse.com" date="1436788800">- Update to version 4.2.8p3 which incorporates all security fixes
  and most other patches we have so far (fate#319040).
  More information on:
  http://archive.ntp.org/ntp4/ChangeLog-stable
- Disable chroot by default (bnc#926510).
- Enable ntpdc for backwards compatibility (bnc#920238).</changelog>
<changelog author="max@suse.com" date="1437652800">- Add "addserver" as a new legacy action.
- Fix the comment regarding addserver in ntp.conf (bnc#910063).</changelog>
<changelog author="max@suse.com" date="1441368000">- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327).
- Add a controlkey to ntp.conf to make the above work.
- Don't let "keysdir" lines in ntp.conf trigger the "keys" parser.
- Disable mode 7 (ntpdc) again, now that we don't use it anymore.</changelog>
<changelog author="max@suse.com" date="1441800000">- Remove ntp.1.gz, it wasn't installed anymore.
- Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz.
  The rest is partially irrelevant, partially redundant and
  potentially outdated (bsc#942587).
- Remove "kod" from the restrict line in ntp.conf (bsc#944300).</changelog>
<changelog author="max@suse.com" date="1442577600">- Use SHA1 instead of MD5 for symmetric keys (bsc#905885).
- Improve runtime configuration:
  * Read keytype from ntp.conf
  * Don't write ntp keys to syslog.
- Fix legacy action scripts to pass on command line arguments.</changelog>
<changelog author="max@suse.com" date="1442923200">- Temporarily disable memlock to avoid problems due to high memory
  usage during name resolution (bsc#946386, ntp-memlock.patch).</changelog>
<changelog author="max@suse.com" date="1446120000">- Update to 4.2.8p4 to fix several security issues (bsc#951608):
  * CVE-2015-7871: NAK to the Future: Symmetric association
    authentication bypass via crypto-NAK
  * CVE-2015-7855: decodenetnum() will ASSERT botch instead of
    returning FAIL on some bogus values
  * CVE-2015-7854: Password Length Memory Corruption Vulnerability
  * CVE-2015-7853: Invalid length data provided by a custom
    refclock driver could cause a buffer overflow
  * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability
  * CVE-2015-7851 saveconfig Directory Traversal Vulnerability
  * CVE-2015-7850 remote config logfile-keyfile
  * CVE-2015-7849 trusted key use-after-free
  * CVE-2015-7848 mode 7 loop counter underrun
  * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC
  * CVE-2015-7703 configuration directives "pidfile" and
    "driftfile" should only be allowed locally
  * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should
    validate the origin timestamp field
  * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey
    data packet length checks
  * obsoletes ntp-memlock.patch.
- Add a controlkey line to /etc/ntp.conf if one does not already
  exist to allow runtime configuuration via ntpq.</changelog>

</package>

<package pkgid="a3e97898c09ce95045ad17570c103243be578becc74bb7c2dffca83f64088d3b" name="ntp" arch="x86_64">
    <version epoch="0" ver="4.2.8p4" rel="9.2"/>

<changelog author="seife+obs@b1-systems.com" date="1397908800">- fix "start-ntp addserver": start-ntp has no "status" method</changelog>
<changelog author="max@suse.com" date="1398772800">- Remove /var/run/ntp from the package:
  http://lists.opensuse.org/opensuse-packaging/2014-04/msg00046.html
- Fix Provides/Obsoletes of package aliases.
- Add /usr/sbin/rc* links.
- Stay enabled across sysv to systemd migrations (bnc#875490).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1399291200">- fix start-ntpd again: service is now called ntpd, not ntp</changelog>
<changelog author="max@suse.com" date="1402574400">- Forward-port some bugs that got fixed for SLE11 (bnc#831311):
  * bnc#817893
  * bnc#482349</changelog>
<changelog author="max@suse.com" date="1411732800">- Re-enable the ntptimeset legacy init script action (bnc#893406).</changelog>
<changelog author="meissner@suse.com" date="1416312000">- ntp-fips-reenablemd5.patch: Reenable use of legacy MD5 in fips mode.
  bnc#898596</changelog>
<changelog author="max@suse.com" date="1418990400">- bnc#910764: VU#852879 ntp security fixes
  * A potential remote code execution problem was found inside
    ntpd. The functions crypto_recv() (when using autokey
    authentication), ctl_putdata(), and configure() where updated
    to avoid buffer overflows that could be
    exploited. (CVE-2014-9295)
  * Furthermore a problem inside the ntpd error handling was found
    that is missing a return statement. This could also lead to a
    potentially attack vector. (CVE-2014-9296)</changelog>
<changelog author="max@suse.com" date="1421409600">- bnc#910764:
  * CVE-2014-9293: Weak default key in config_auth()
  * CVE-2014-9294: ntp-keygen uses weak random number generator
    seed when generating MD5 keys.</changelog>
<changelog author="max@suse.com" date="1422964800">- bnc#911792: Security backport from ntp-4.2.8p1:
- NTP Bug 2671, CVE-2014-9297 - vallen is not validated in several
  places in ntp_crypto.c, leading to potential info leak.</changelog>
<changelog author="max@suse.com" date="1423483200">- NTP Bug 2672, CVE-2014-9298: ::1 can be spoofed on some OSes, so
  ACLs based on IPv6 ::1 addresses can be bypassed.</changelog>
<changelog author="max@suse.com" date="1426248000">- Fix slew mode for leap seconds (bnc#918342).</changelog>
<changelog author="meissner@suse.com" date="1428408000">- security update bsc#924202 / VU#374268
  - ntp-CVE-2015-1798.patch: CVE-2015-1798: NTP Bug 2779: ntpd accepts
    unauthenticated packets with symmetric key crypto.
  - ntp-CVE-2015-1799.patch: CVE-2015-1799: NTP Bug 2781:  Authentication
    doesn't protect symmetric associations against DoS attacks.</changelog>
<changelog author="max@suse.com" date="1430136000">- Security fix: ntp-keygen may generate non-random symmetric keys
  on big-endian systems (bsc#928321, CVE-2015-3405).</changelog>
<changelog author="max@suse.com" date="1436788800">- Update to version 4.2.8p3 which incorporates all security fixes
  and most other patches we have so far (fate#319040).
  More information on:
  http://archive.ntp.org/ntp4/ChangeLog-stable
- Disable chroot by default (bnc#926510).
- Enable ntpdc for backwards compatibility (bnc#920238).</changelog>
<changelog author="max@suse.com" date="1437652800">- Add "addserver" as a new legacy action.
- Fix the comment regarding addserver in ntp.conf (bnc#910063).</changelog>
<changelog author="max@suse.com" date="1441368000">- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327).
- Add a controlkey to ntp.conf to make the above work.
- Don't let "keysdir" lines in ntp.conf trigger the "keys" parser.
- Disable mode 7 (ntpdc) again, now that we don't use it anymore.</changelog>
<changelog author="max@suse.com" date="1441800000">- Remove ntp.1.gz, it wasn't installed anymore.
- Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz.
  The rest is partially irrelevant, partially redundant and
  potentially outdated (bsc#942587).
- Remove "kod" from the restrict line in ntp.conf (bsc#944300).</changelog>
<changelog author="max@suse.com" date="1442577600">- Use SHA1 instead of MD5 for symmetric keys (bsc#905885).
- Improve runtime configuration:
  * Read keytype from ntp.conf
  * Don't write ntp keys to syslog.
- Fix legacy action scripts to pass on command line arguments.</changelog>
<changelog author="max@suse.com" date="1442923200">- Temporarily disable memlock to avoid problems due to high memory
  usage during name resolution (bsc#946386, ntp-memlock.patch).</changelog>
<changelog author="max@suse.com" date="1446120000">- Update to 4.2.8p4 to fix several security issues (bsc#951608):
  * CVE-2015-7871: NAK to the Future: Symmetric association
    authentication bypass via crypto-NAK
  * CVE-2015-7855: decodenetnum() will ASSERT botch instead of
    returning FAIL on some bogus values
  * CVE-2015-7854: Password Length Memory Corruption Vulnerability
  * CVE-2015-7853: Invalid length data provided by a custom
    refclock driver could cause a buffer overflow
  * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability
  * CVE-2015-7851 saveconfig Directory Traversal Vulnerability
  * CVE-2015-7850 remote config logfile-keyfile
  * CVE-2015-7849 trusted key use-after-free
  * CVE-2015-7848 mode 7 loop counter underrun
  * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC
  * CVE-2015-7703 configuration directives "pidfile" and
    "driftfile" should only be allowed locally
  * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should
    validate the origin timestamp field
  * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey
    data packet length checks
  * obsoletes ntp-memlock.patch.
- Add a controlkey line to /etc/ntp.conf if one does not already
  exist to allow runtime configuuration via ntpq.</changelog>

</package>

<package pkgid="72b4bceb6fd3a032769d0547a9b86ec336068f7996d9564e44d1e223c1de1c3f" name="ntp-debuginfo" arch="x86_64">
    <version epoch="0" ver="4.2.8p4" rel="9.2"/>

<changelog author="seife+obs@b1-systems.com" date="1397908800">- fix "start-ntp addserver": start-ntp has no "status" method</changelog>
<changelog author="max@suse.com" date="1398772800">- Remove /var/run/ntp from the package:
  http://lists.opensuse.org/opensuse-packaging/2014-04/msg00046.html
- Fix Provides/Obsoletes of package aliases.
- Add /usr/sbin/rc* links.
- Stay enabled across sysv to systemd migrations (bnc#875490).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1399291200">- fix start-ntpd again: service is now called ntpd, not ntp</changelog>
<changelog author="max@suse.com" date="1402574400">- Forward-port some bugs that got fixed for SLE11 (bnc#831311):
  * bnc#817893
  * bnc#482349</changelog>
<changelog author="max@suse.com" date="1411732800">- Re-enable the ntptimeset legacy init script action (bnc#893406).</changelog>
<changelog author="meissner@suse.com" date="1416312000">- ntp-fips-reenablemd5.patch: Reenable use of legacy MD5 in fips mode.
  bnc#898596</changelog>
<changelog author="max@suse.com" date="1418990400">- bnc#910764: VU#852879 ntp security fixes
  * A potential remote code execution problem was found inside
    ntpd. The functions crypto_recv() (when using autokey
    authentication), ctl_putdata(), and configure() where updated
    to avoid buffer overflows that could be
    exploited. (CVE-2014-9295)
  * Furthermore a problem inside the ntpd error handling was found
    that is missing a return statement. This could also lead to a
    potentially attack vector. (CVE-2014-9296)</changelog>
<changelog author="max@suse.com" date="1421409600">- bnc#910764:
  * CVE-2014-9293: Weak default key in config_auth()
  * CVE-2014-9294: ntp-keygen uses weak random number generator
    seed when generating MD5 keys.</changelog>
<changelog author="max@suse.com" date="1422964800">- bnc#911792: Security backport from ntp-4.2.8p1:
- NTP Bug 2671, CVE-2014-9297 - vallen is not validated in several
  places in ntp_crypto.c, leading to potential info leak.</changelog>
<changelog author="max@suse.com" date="1423483200">- NTP Bug 2672, CVE-2014-9298: ::1 can be spoofed on some OSes, so
  ACLs based on IPv6 ::1 addresses can be bypassed.</changelog>
<changelog author="max@suse.com" date="1426248000">- Fix slew mode for leap seconds (bnc#918342).</changelog>
<changelog author="meissner@suse.com" date="1428408000">- security update bsc#924202 / VU#374268
  - ntp-CVE-2015-1798.patch: CVE-2015-1798: NTP Bug 2779: ntpd accepts
    unauthenticated packets with symmetric key crypto.
  - ntp-CVE-2015-1799.patch: CVE-2015-1799: NTP Bug 2781:  Authentication
    doesn't protect symmetric associations against DoS attacks.</changelog>
<changelog author="max@suse.com" date="1430136000">- Security fix: ntp-keygen may generate non-random symmetric keys
  on big-endian systems (bsc#928321, CVE-2015-3405).</changelog>
<changelog author="max@suse.com" date="1436788800">- Update to version 4.2.8p3 which incorporates all security fixes
  and most other patches we have so far (fate#319040).
  More information on:
  http://archive.ntp.org/ntp4/ChangeLog-stable
- Disable chroot by default (bnc#926510).
- Enable ntpdc for backwards compatibility (bnc#920238).</changelog>
<changelog author="max@suse.com" date="1437652800">- Add "addserver" as a new legacy action.
- Fix the comment regarding addserver in ntp.conf (bnc#910063).</changelog>
<changelog author="max@suse.com" date="1441368000">- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327).
- Add a controlkey to ntp.conf to make the above work.
- Don't let "keysdir" lines in ntp.conf trigger the "keys" parser.
- Disable mode 7 (ntpdc) again, now that we don't use it anymore.</changelog>
<changelog author="max@suse.com" date="1441800000">- Remove ntp.1.gz, it wasn't installed anymore.
- Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz.
  The rest is partially irrelevant, partially redundant and
  potentially outdated (bsc#942587).
- Remove "kod" from the restrict line in ntp.conf (bsc#944300).</changelog>
<changelog author="max@suse.com" date="1442577600">- Use SHA1 instead of MD5 for symmetric keys (bsc#905885).
- Improve runtime configuration:
  * Read keytype from ntp.conf
  * Don't write ntp keys to syslog.
- Fix legacy action scripts to pass on command line arguments.</changelog>
<changelog author="max@suse.com" date="1442923200">- Temporarily disable memlock to avoid problems due to high memory
  usage during name resolution (bsc#946386, ntp-memlock.patch).</changelog>
<changelog author="max@suse.com" date="1446120000">- Update to 4.2.8p4 to fix several security issues (bsc#951608):
  * CVE-2015-7871: NAK to the Future: Symmetric association
    authentication bypass via crypto-NAK
  * CVE-2015-7855: decodenetnum() will ASSERT botch instead of
    returning FAIL on some bogus values
  * CVE-2015-7854: Password Length Memory Corruption Vulnerability
  * CVE-2015-7853: Invalid length data provided by a custom
    refclock driver could cause a buffer overflow
  * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability
  * CVE-2015-7851 saveconfig Directory Traversal Vulnerability
  * CVE-2015-7850 remote config logfile-keyfile
  * CVE-2015-7849 trusted key use-after-free
  * CVE-2015-7848 mode 7 loop counter underrun
  * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC
  * CVE-2015-7703 configuration directives "pidfile" and
    "driftfile" should only be allowed locally
  * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should
    validate the origin timestamp field
  * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey
    data packet length checks
  * obsoletes ntp-memlock.patch.
- Add a controlkey line to /etc/ntp.conf if one does not already
  exist to allow runtime configuuration via ntpq.</changelog>

</package>

<package pkgid="f7483c9634ab4dbdb60be5ffdc88e58d78b051fdc53f0725f54dce7ceba12698" name="ntp-debugsource" arch="x86_64">
    <version epoch="0" ver="4.2.8p4" rel="9.2"/>

<changelog author="seife+obs@b1-systems.com" date="1397908800">- fix "start-ntp addserver": start-ntp has no "status" method</changelog>
<changelog author="max@suse.com" date="1398772800">- Remove /var/run/ntp from the package:
  http://lists.opensuse.org/opensuse-packaging/2014-04/msg00046.html
- Fix Provides/Obsoletes of package aliases.
- Add /usr/sbin/rc* links.
- Stay enabled across sysv to systemd migrations (bnc#875490).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1399291200">- fix start-ntpd again: service is now called ntpd, not ntp</changelog>
<changelog author="max@suse.com" date="1402574400">- Forward-port some bugs that got fixed for SLE11 (bnc#831311):
  * bnc#817893
  * bnc#482349</changelog>
<changelog author="max@suse.com" date="1411732800">- Re-enable the ntptimeset legacy init script action (bnc#893406).</changelog>
<changelog author="meissner@suse.com" date="1416312000">- ntp-fips-reenablemd5.patch: Reenable use of legacy MD5 in fips mode.
  bnc#898596</changelog>
<changelog author="max@suse.com" date="1418990400">- bnc#910764: VU#852879 ntp security fixes
  * A potential remote code execution problem was found inside
    ntpd. The functions crypto_recv() (when using autokey
    authentication), ctl_putdata(), and configure() where updated
    to avoid buffer overflows that could be
    exploited. (CVE-2014-9295)
  * Furthermore a problem inside the ntpd error handling was found
    that is missing a return statement. This could also lead to a
    potentially attack vector. (CVE-2014-9296)</changelog>
<changelog author="max@suse.com" date="1421409600">- bnc#910764:
  * CVE-2014-9293: Weak default key in config_auth()
  * CVE-2014-9294: ntp-keygen uses weak random number generator
    seed when generating MD5 keys.</changelog>
<changelog author="max@suse.com" date="1422964800">- bnc#911792: Security backport from ntp-4.2.8p1:
- NTP Bug 2671, CVE-2014-9297 - vallen is not validated in several
  places in ntp_crypto.c, leading to potential info leak.</changelog>
<changelog author="max@suse.com" date="1423483200">- NTP Bug 2672, CVE-2014-9298: ::1 can be spoofed on some OSes, so
  ACLs based on IPv6 ::1 addresses can be bypassed.</changelog>
<changelog author="max@suse.com" date="1426248000">- Fix slew mode for leap seconds (bnc#918342).</changelog>
<changelog author="meissner@suse.com" date="1428408000">- security update bsc#924202 / VU#374268
  - ntp-CVE-2015-1798.patch: CVE-2015-1798: NTP Bug 2779: ntpd accepts
    unauthenticated packets with symmetric key crypto.
  - ntp-CVE-2015-1799.patch: CVE-2015-1799: NTP Bug 2781:  Authentication
    doesn't protect symmetric associations against DoS attacks.</changelog>
<changelog author="max@suse.com" date="1430136000">- Security fix: ntp-keygen may generate non-random symmetric keys
  on big-endian systems (bsc#928321, CVE-2015-3405).</changelog>
<changelog author="max@suse.com" date="1436788800">- Update to version 4.2.8p3 which incorporates all security fixes
  and most other patches we have so far (fate#319040).
  More information on:
  http://archive.ntp.org/ntp4/ChangeLog-stable
- Disable chroot by default (bnc#926510).
- Enable ntpdc for backwards compatibility (bnc#920238).</changelog>
<changelog author="max@suse.com" date="1437652800">- Add "addserver" as a new legacy action.
- Fix the comment regarding addserver in ntp.conf (bnc#910063).</changelog>
<changelog author="max@suse.com" date="1441368000">- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327).
- Add a controlkey to ntp.conf to make the above work.
- Don't let "keysdir" lines in ntp.conf trigger the "keys" parser.
- Disable mode 7 (ntpdc) again, now that we don't use it anymore.</changelog>
<changelog author="max@suse.com" date="1441800000">- Remove ntp.1.gz, it wasn't installed anymore.
- Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz.
  The rest is partially irrelevant, partially redundant and
  potentially outdated (bsc#942587).
- Remove "kod" from the restrict line in ntp.conf (bsc#944300).</changelog>
<changelog author="max@suse.com" date="1442577600">- Use SHA1 instead of MD5 for symmetric keys (bsc#905885).
- Improve runtime configuration:
  * Read keytype from ntp.conf
  * Don't write ntp keys to syslog.
- Fix legacy action scripts to pass on command line arguments.</changelog>
<changelog author="max@suse.com" date="1442923200">- Temporarily disable memlock to avoid problems due to high memory
  usage during name resolution (bsc#946386, ntp-memlock.patch).</changelog>
<changelog author="max@suse.com" date="1446120000">- Update to 4.2.8p4 to fix several security issues (bsc#951608):
  * CVE-2015-7871: NAK to the Future: Symmetric association
    authentication bypass via crypto-NAK
  * CVE-2015-7855: decodenetnum() will ASSERT botch instead of
    returning FAIL on some bogus values
  * CVE-2015-7854: Password Length Memory Corruption Vulnerability
  * CVE-2015-7853: Invalid length data provided by a custom
    refclock driver could cause a buffer overflow
  * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability
  * CVE-2015-7851 saveconfig Directory Traversal Vulnerability
  * CVE-2015-7850 remote config logfile-keyfile
  * CVE-2015-7849 trusted key use-after-free
  * CVE-2015-7848 mode 7 loop counter underrun
  * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC
  * CVE-2015-7703 configuration directives "pidfile" and
    "driftfile" should only be allowed locally
  * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should
    validate the origin timestamp field
  * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey
    data packet length checks
  * obsoletes ntp-memlock.patch.
- Add a controlkey line to /etc/ntp.conf if one does not already
  exist to allow runtime configuuration via ntpq.</changelog>

</package>

<package pkgid="4b0b3ee84a6120af0b940b2da2ee8a6c93eb56225bb95ae167ed6b7a04c5a330" name="ntp-doc" arch="x86_64">
    <version epoch="0" ver="4.2.8p4" rel="9.2"/>

<changelog author="seife+obs@b1-systems.com" date="1397908800">- fix "start-ntp addserver": start-ntp has no "status" method</changelog>
<changelog author="max@suse.com" date="1398772800">- Remove /var/run/ntp from the package:
  http://lists.opensuse.org/opensuse-packaging/2014-04/msg00046.html
- Fix Provides/Obsoletes of package aliases.
- Add /usr/sbin/rc* links.
- Stay enabled across sysv to systemd migrations (bnc#875490).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1399291200">- fix start-ntpd again: service is now called ntpd, not ntp</changelog>
<changelog author="max@suse.com" date="1402574400">- Forward-port some bugs that got fixed for SLE11 (bnc#831311):
  * bnc#817893
  * bnc#482349</changelog>
<changelog author="max@suse.com" date="1411732800">- Re-enable the ntptimeset legacy init script action (bnc#893406).</changelog>
<changelog author="meissner@suse.com" date="1416312000">- ntp-fips-reenablemd5.patch: Reenable use of legacy MD5 in fips mode.
  bnc#898596</changelog>
<changelog author="max@suse.com" date="1418990400">- bnc#910764: VU#852879 ntp security fixes
  * A potential remote code execution problem was found inside
    ntpd. The functions crypto_recv() (when using autokey
    authentication), ctl_putdata(), and configure() where updated
    to avoid buffer overflows that could be
    exploited. (CVE-2014-9295)
  * Furthermore a problem inside the ntpd error handling was found
    that is missing a return statement. This could also lead to a
    potentially attack vector. (CVE-2014-9296)</changelog>
<changelog author="max@suse.com" date="1421409600">- bnc#910764:
  * CVE-2014-9293: Weak default key in config_auth()
  * CVE-2014-9294: ntp-keygen uses weak random number generator
    seed when generating MD5 keys.</changelog>
<changelog author="max@suse.com" date="1422964800">- bnc#911792: Security backport from ntp-4.2.8p1:
- NTP Bug 2671, CVE-2014-9297 - vallen is not validated in several
  places in ntp_crypto.c, leading to potential info leak.</changelog>
<changelog author="max@suse.com" date="1423483200">- NTP Bug 2672, CVE-2014-9298: ::1 can be spoofed on some OSes, so
  ACLs based on IPv6 ::1 addresses can be bypassed.</changelog>
<changelog author="max@suse.com" date="1426248000">- Fix slew mode for leap seconds (bnc#918342).</changelog>
<changelog author="meissner@suse.com" date="1428408000">- security update bsc#924202 / VU#374268
  - ntp-CVE-2015-1798.patch: CVE-2015-1798: NTP Bug 2779: ntpd accepts
    unauthenticated packets with symmetric key crypto.
  - ntp-CVE-2015-1799.patch: CVE-2015-1799: NTP Bug 2781:  Authentication
    doesn't protect symmetric associations against DoS attacks.</changelog>
<changelog author="max@suse.com" date="1430136000">- Security fix: ntp-keygen may generate non-random symmetric keys
  on big-endian systems (bsc#928321, CVE-2015-3405).</changelog>
<changelog author="max@suse.com" date="1436788800">- Update to version 4.2.8p3 which incorporates all security fixes
  and most other patches we have so far (fate#319040).
  More information on:
  http://archive.ntp.org/ntp4/ChangeLog-stable
- Disable chroot by default (bnc#926510).
- Enable ntpdc for backwards compatibility (bnc#920238).</changelog>
<changelog author="max@suse.com" date="1437652800">- Add "addserver" as a new legacy action.
- Fix the comment regarding addserver in ntp.conf (bnc#910063).</changelog>
<changelog author="max@suse.com" date="1441368000">- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327).
- Add a controlkey to ntp.conf to make the above work.
- Don't let "keysdir" lines in ntp.conf trigger the "keys" parser.
- Disable mode 7 (ntpdc) again, now that we don't use it anymore.</changelog>
<changelog author="max@suse.com" date="1441800000">- Remove ntp.1.gz, it wasn't installed anymore.
- Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz.
  The rest is partially irrelevant, partially redundant and
  potentially outdated (bsc#942587).
- Remove "kod" from the restrict line in ntp.conf (bsc#944300).</changelog>
<changelog author="max@suse.com" date="1442577600">- Use SHA1 instead of MD5 for symmetric keys (bsc#905885).
- Improve runtime configuration:
  * Read keytype from ntp.conf
  * Don't write ntp keys to syslog.
- Fix legacy action scripts to pass on command line arguments.</changelog>
<changelog author="max@suse.com" date="1442923200">- Temporarily disable memlock to avoid problems due to high memory
  usage during name resolution (bsc#946386, ntp-memlock.patch).</changelog>
<changelog author="max@suse.com" date="1446120000">- Update to 4.2.8p4 to fix several security issues (bsc#951608):
  * CVE-2015-7871: NAK to the Future: Symmetric association
    authentication bypass via crypto-NAK
  * CVE-2015-7855: decodenetnum() will ASSERT botch instead of
    returning FAIL on some bogus values
  * CVE-2015-7854: Password Length Memory Corruption Vulnerability
  * CVE-2015-7853: Invalid length data provided by a custom
    refclock driver could cause a buffer overflow
  * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability
  * CVE-2015-7851 saveconfig Directory Traversal Vulnerability
  * CVE-2015-7850 remote config logfile-keyfile
  * CVE-2015-7849 trusted key use-after-free
  * CVE-2015-7848 mode 7 loop counter underrun
  * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC
  * CVE-2015-7703 configuration directives "pidfile" and
    "driftfile" should only be allowed locally
  * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should
    validate the origin timestamp field
  * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey
    data packet length checks
  * obsoletes ntp-memlock.patch.
- Add a controlkey line to /etc/ntp.conf if one does not already
  exist to allow runtime configuuration via ntpq.</changelog>

</package>

<package pkgid="b3a360f7353f7c2f8e8152958c371f55942afea920a6251087b23beff2ea43be" name="openCryptoki" arch="src">
    <version epoch="0" ver="3.2" rel="4.1"/>

<changelog author="meissner@suse.com" date="1354968000">- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,</changelog>
<changelog author="dvaleev@suse.com" date="1386676800">- enable ppc64le</changelog>
<changelog author="ro@suse.de" date="1391515200">- add aarch64 to 64bit archs</changelog>
<changelog author="jjolly@suse.com" date="1391515201">- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
  - New ep11 token to support IBM Crypto Express adpaters
    (starting with Crypto Express 4S adapters) configured with
    Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
  - New opencryptoki.conf file to replace pk_config_data and
    pkcs11_starup.  The opencryptoki.conf contains slot entry
    information for tokens.
  - Removed pkcs_slot and pkcs11_startup shell scripts.
  - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
    mechanisms using 3DES keys. (FATE#315323)
  - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
    mechanisms. (FATE#315323)
  - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
    CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
    mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
  - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch</changelog>
<changelog author="ro@suse.de" date="1394020800">- fix build on x86 (add CCA and TPM to filelist)
- fix libica detection on s390/s390x to get ICA module built</changelog>
<changelog author="jjolly@suse.com" date="1394193600">- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions</changelog>
<changelog author="jjolly@suse.com" date="1401969600">- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - print_mechanism() ignored bad returncodes from the called
    function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - Fix failure when confname is not given, use default
    ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
  - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - zcrypt library included in build by default</changelog>
<changelog author="jjolly@suse.com" date="1401969601">- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x</changelog>
<changelog author="jjolly@suse.com" date="1401969602">- Moved libpkcs11_icsf 32-bit out of s390-specific files</changelog>
<changelog author="jjolly@suse.com" date="1403784000">- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
  - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1408104000">- Specfile Cleanup, Added directory macros in appropriate places</changelog>
<changelog author="jjolly@suse.com" date="1409832000">- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832001">- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832002">- Added all files from %src/doc as rpm %doc (bnc#894780)</changelog>
<changelog author="jjolly@suse.com" date="1409918400">- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1409918401">- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch</changelog>
<changelog author="jjolly@suse.com" date="1439899200">- Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
  - ocki-3.1_01_ep11_makefile.patch
  - ocki-3.1_02_ep11_m_init.patch
  - ocki-3.1_03_ock_obj_mgr.patch
  - ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  - ocki-3.1_05_ep11_readme_update.patch
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - ocki-3.1_06_0005-Small-reworks.patch
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - ocki-3.1_07_0001-Man-page-corrections.patch
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1440072000">- Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
  - Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162)</changelog>
<changelog author="jjolly@suse.com" date="1443787200">- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
  - Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
  - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
  - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)</changelog>
<changelog author="jjolly@suse.com" date="1446811200">- Get a new ldap handle for each session opened in the icsf token,
    once the user has authenticated. (bsc#953347,LTC#130078)
  - ocki-3.2_05_icsf_ldap_handles.patch
  - ocki-3.2_06_icsf_sign_verify.patch</changelog>

</package>

<package pkgid="9aba9dd4701b8ad8c2d4d9567fe5e0c87af9e31d7bdea54172c74bb8d553abd3" name="openCryptoki" arch="x86_64">
    <version epoch="0" ver="3.2" rel="4.1"/>

<changelog author="meissner@suse.com" date="1354968000">- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,</changelog>
<changelog author="dvaleev@suse.com" date="1386676800">- enable ppc64le</changelog>
<changelog author="ro@suse.de" date="1391515200">- add aarch64 to 64bit archs</changelog>
<changelog author="jjolly@suse.com" date="1391515201">- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
  - New ep11 token to support IBM Crypto Express adpaters
    (starting with Crypto Express 4S adapters) configured with
    Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
  - New opencryptoki.conf file to replace pk_config_data and
    pkcs11_starup.  The opencryptoki.conf contains slot entry
    information for tokens.
  - Removed pkcs_slot and pkcs11_startup shell scripts.
  - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
    mechanisms using 3DES keys. (FATE#315323)
  - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
    mechanisms. (FATE#315323)
  - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
    CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
    mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
  - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch</changelog>
<changelog author="ro@suse.de" date="1394020800">- fix build on x86 (add CCA and TPM to filelist)
- fix libica detection on s390/s390x to get ICA module built</changelog>
<changelog author="jjolly@suse.com" date="1394193600">- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions</changelog>
<changelog author="jjolly@suse.com" date="1401969600">- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - print_mechanism() ignored bad returncodes from the called
    function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - Fix failure when confname is not given, use default
    ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
  - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - zcrypt library included in build by default</changelog>
<changelog author="jjolly@suse.com" date="1401969601">- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x</changelog>
<changelog author="jjolly@suse.com" date="1401969602">- Moved libpkcs11_icsf 32-bit out of s390-specific files</changelog>
<changelog author="jjolly@suse.com" date="1403784000">- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
  - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1408104000">- Specfile Cleanup, Added directory macros in appropriate places</changelog>
<changelog author="jjolly@suse.com" date="1409832000">- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832001">- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832002">- Added all files from %src/doc as rpm %doc (bnc#894780)</changelog>
<changelog author="jjolly@suse.com" date="1409918400">- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1409918401">- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch</changelog>
<changelog author="jjolly@suse.com" date="1439899200">- Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
  - ocki-3.1_01_ep11_makefile.patch
  - ocki-3.1_02_ep11_m_init.patch
  - ocki-3.1_03_ock_obj_mgr.patch
  - ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  - ocki-3.1_05_ep11_readme_update.patch
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - ocki-3.1_06_0005-Small-reworks.patch
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - ocki-3.1_07_0001-Man-page-corrections.patch
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1440072000">- Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
  - Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162)</changelog>
<changelog author="jjolly@suse.com" date="1443787200">- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
  - Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
  - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
  - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)</changelog>
<changelog author="jjolly@suse.com" date="1446811200">- Get a new ldap handle for each session opened in the icsf token,
    once the user has authenticated. (bsc#953347,LTC#130078)
  - ocki-3.2_05_icsf_ldap_handles.patch
  - ocki-3.2_06_icsf_sign_verify.patch</changelog>

</package>

<package pkgid="ae5ea3ef70d9abd728145a3e4f510fc0e4907b3f1f1701bb59af93227176b59c" name="openCryptoki-64bit" arch="x86_64">
    <version epoch="0" ver="3.2" rel="4.1"/>

<changelog author="meissner@suse.com" date="1354968000">- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,</changelog>
<changelog author="dvaleev@suse.com" date="1386676800">- enable ppc64le</changelog>
<changelog author="ro@suse.de" date="1391515200">- add aarch64 to 64bit archs</changelog>
<changelog author="jjolly@suse.com" date="1391515201">- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
  - New ep11 token to support IBM Crypto Express adpaters
    (starting with Crypto Express 4S adapters) configured with
    Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
  - New opencryptoki.conf file to replace pk_config_data and
    pkcs11_starup.  The opencryptoki.conf contains slot entry
    information for tokens.
  - Removed pkcs_slot and pkcs11_startup shell scripts.
  - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
    mechanisms using 3DES keys. (FATE#315323)
  - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
    mechanisms. (FATE#315323)
  - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
    CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
    mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
  - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch</changelog>
<changelog author="ro@suse.de" date="1394020800">- fix build on x86 (add CCA and TPM to filelist)
- fix libica detection on s390/s390x to get ICA module built</changelog>
<changelog author="jjolly@suse.com" date="1394193600">- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions</changelog>
<changelog author="jjolly@suse.com" date="1401969600">- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - print_mechanism() ignored bad returncodes from the called
    function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - Fix failure when confname is not given, use default
    ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
  - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - zcrypt library included in build by default</changelog>
<changelog author="jjolly@suse.com" date="1401969601">- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x</changelog>
<changelog author="jjolly@suse.com" date="1401969602">- Moved libpkcs11_icsf 32-bit out of s390-specific files</changelog>
<changelog author="jjolly@suse.com" date="1403784000">- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
  - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1408104000">- Specfile Cleanup, Added directory macros in appropriate places</changelog>
<changelog author="jjolly@suse.com" date="1409832000">- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832001">- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832002">- Added all files from %src/doc as rpm %doc (bnc#894780)</changelog>
<changelog author="jjolly@suse.com" date="1409918400">- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1409918401">- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch</changelog>
<changelog author="jjolly@suse.com" date="1439899200">- Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
  - ocki-3.1_01_ep11_makefile.patch
  - ocki-3.1_02_ep11_m_init.patch
  - ocki-3.1_03_ock_obj_mgr.patch
  - ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  - ocki-3.1_05_ep11_readme_update.patch
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - ocki-3.1_06_0005-Small-reworks.patch
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - ocki-3.1_07_0001-Man-page-corrections.patch
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1440072000">- Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
  - Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162)</changelog>
<changelog author="jjolly@suse.com" date="1443787200">- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
  - Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
  - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
  - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)</changelog>
<changelog author="jjolly@suse.com" date="1446811200">- Get a new ldap handle for each session opened in the icsf token,
    once the user has authenticated. (bsc#953347,LTC#130078)
  - ocki-3.2_05_icsf_ldap_handles.patch
  - ocki-3.2_06_icsf_sign_verify.patch</changelog>

</package>

<package pkgid="fdc6daf1dffcff1df48a144372e698383890994125310853768e5719227a9b22" name="openCryptoki-64bit-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.2" rel="4.1"/>

<changelog author="meissner@suse.com" date="1354968000">- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,</changelog>
<changelog author="dvaleev@suse.com" date="1386676800">- enable ppc64le</changelog>
<changelog author="ro@suse.de" date="1391515200">- add aarch64 to 64bit archs</changelog>
<changelog author="jjolly@suse.com" date="1391515201">- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
  - New ep11 token to support IBM Crypto Express adpaters
    (starting with Crypto Express 4S adapters) configured with
    Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
  - New opencryptoki.conf file to replace pk_config_data and
    pkcs11_starup.  The opencryptoki.conf contains slot entry
    information for tokens.
  - Removed pkcs_slot and pkcs11_startup shell scripts.
  - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
    mechanisms using 3DES keys. (FATE#315323)
  - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
    mechanisms. (FATE#315323)
  - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
    CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
    mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
  - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch</changelog>
<changelog author="ro@suse.de" date="1394020800">- fix build on x86 (add CCA and TPM to filelist)
- fix libica detection on s390/s390x to get ICA module built</changelog>
<changelog author="jjolly@suse.com" date="1394193600">- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions</changelog>
<changelog author="jjolly@suse.com" date="1401969600">- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - print_mechanism() ignored bad returncodes from the called
    function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - Fix failure when confname is not given, use default
    ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
  - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - zcrypt library included in build by default</changelog>
<changelog author="jjolly@suse.com" date="1401969601">- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x</changelog>
<changelog author="jjolly@suse.com" date="1401969602">- Moved libpkcs11_icsf 32-bit out of s390-specific files</changelog>
<changelog author="jjolly@suse.com" date="1403784000">- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
  - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1408104000">- Specfile Cleanup, Added directory macros in appropriate places</changelog>
<changelog author="jjolly@suse.com" date="1409832000">- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832001">- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832002">- Added all files from %src/doc as rpm %doc (bnc#894780)</changelog>
<changelog author="jjolly@suse.com" date="1409918400">- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1409918401">- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch</changelog>
<changelog author="jjolly@suse.com" date="1439899200">- Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
  - ocki-3.1_01_ep11_makefile.patch
  - ocki-3.1_02_ep11_m_init.patch
  - ocki-3.1_03_ock_obj_mgr.patch
  - ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  - ocki-3.1_05_ep11_readme_update.patch
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - ocki-3.1_06_0005-Small-reworks.patch
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - ocki-3.1_07_0001-Man-page-corrections.patch
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1440072000">- Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
  - Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162)</changelog>
<changelog author="jjolly@suse.com" date="1443787200">- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
  - Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
  - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
  - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)</changelog>
<changelog author="jjolly@suse.com" date="1446811200">- Get a new ldap handle for each session opened in the icsf token,
    once the user has authenticated. (bsc#953347,LTC#130078)
  - ocki-3.2_05_icsf_ldap_handles.patch
  - ocki-3.2_06_icsf_sign_verify.patch</changelog>

</package>

<package pkgid="79d00785ef897f16680545c1669db3cfc68817e72020ae3260bdeee7c3d5bcab" name="openCryptoki-debuginfo" arch="x86_64">
    <version epoch="0" ver="3.2" rel="4.1"/>

<changelog author="meissner@suse.com" date="1354968000">- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,</changelog>
<changelog author="dvaleev@suse.com" date="1386676800">- enable ppc64le</changelog>
<changelog author="ro@suse.de" date="1391515200">- add aarch64 to 64bit archs</changelog>
<changelog author="jjolly@suse.com" date="1391515201">- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
  - New ep11 token to support IBM Crypto Express adpaters
    (starting with Crypto Express 4S adapters) configured with
    Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
  - New opencryptoki.conf file to replace pk_config_data and
    pkcs11_starup.  The opencryptoki.conf contains slot entry
    information for tokens.
  - Removed pkcs_slot and pkcs11_startup shell scripts.
  - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
    mechanisms using 3DES keys. (FATE#315323)
  - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
    mechanisms. (FATE#315323)
  - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
    CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
    mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
  - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch</changelog>
<changelog author="ro@suse.de" date="1394020800">- fix build on x86 (add CCA and TPM to filelist)
- fix libica detection on s390/s390x to get ICA module built</changelog>
<changelog author="jjolly@suse.com" date="1394193600">- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions</changelog>
<changelog author="jjolly@suse.com" date="1401969600">- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - print_mechanism() ignored bad returncodes from the called
    function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - Fix failure when confname is not given, use default
    ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
  - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - zcrypt library included in build by default</changelog>
<changelog author="jjolly@suse.com" date="1401969601">- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x</changelog>
<changelog author="jjolly@suse.com" date="1401969602">- Moved libpkcs11_icsf 32-bit out of s390-specific files</changelog>
<changelog author="jjolly@suse.com" date="1403784000">- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
  - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1408104000">- Specfile Cleanup, Added directory macros in appropriate places</changelog>
<changelog author="jjolly@suse.com" date="1409832000">- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832001">- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832002">- Added all files from %src/doc as rpm %doc (bnc#894780)</changelog>
<changelog author="jjolly@suse.com" date="1409918400">- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1409918401">- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch</changelog>
<changelog author="jjolly@suse.com" date="1439899200">- Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
  - ocki-3.1_01_ep11_makefile.patch
  - ocki-3.1_02_ep11_m_init.patch
  - ocki-3.1_03_ock_obj_mgr.patch
  - ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  - ocki-3.1_05_ep11_readme_update.patch
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - ocki-3.1_06_0005-Small-reworks.patch
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - ocki-3.1_07_0001-Man-page-corrections.patch
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1440072000">- Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
  - Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162)</changelog>
<changelog author="jjolly@suse.com" date="1443787200">- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
  - Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
  - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
  - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)</changelog>
<changelog author="jjolly@suse.com" date="1446811200">- Get a new ldap handle for each session opened in the icsf token,
    once the user has authenticated. (bsc#953347,LTC#130078)
  - ocki-3.2_05_icsf_ldap_handles.patch
  - ocki-3.2_06_icsf_sign_verify.patch</changelog>

</package>

<package pkgid="0ed985378929904d53238459ea2391d686c6c2a1b3fce6615d68b5b5d3503bc5" name="openCryptoki-debugsource" arch="x86_64">
    <version epoch="0" ver="3.2" rel="4.1"/>

<changelog author="meissner@suse.com" date="1354968000">- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,</changelog>
<changelog author="dvaleev@suse.com" date="1386676800">- enable ppc64le</changelog>
<changelog author="ro@suse.de" date="1391515200">- add aarch64 to 64bit archs</changelog>
<changelog author="jjolly@suse.com" date="1391515201">- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
  - New ep11 token to support IBM Crypto Express adpaters
    (starting with Crypto Express 4S adapters) configured with
    Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
  - New opencryptoki.conf file to replace pk_config_data and
    pkcs11_starup.  The opencryptoki.conf contains slot entry
    information for tokens.
  - Removed pkcs_slot and pkcs11_startup shell scripts.
  - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
    mechanisms using 3DES keys. (FATE#315323)
  - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
    mechanisms. (FATE#315323)
  - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
    CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
    mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
  - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch</changelog>
<changelog author="ro@suse.de" date="1394020800">- fix build on x86 (add CCA and TPM to filelist)
- fix libica detection on s390/s390x to get ICA module built</changelog>
<changelog author="jjolly@suse.com" date="1394193600">- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions</changelog>
<changelog author="jjolly@suse.com" date="1401969600">- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - print_mechanism() ignored bad returncodes from the called
    function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - Fix failure when confname is not given, use default
    ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
  - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - zcrypt library included in build by default</changelog>
<changelog author="jjolly@suse.com" date="1401969601">- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x</changelog>
<changelog author="jjolly@suse.com" date="1401969602">- Moved libpkcs11_icsf 32-bit out of s390-specific files</changelog>
<changelog author="jjolly@suse.com" date="1403784000">- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
  - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1408104000">- Specfile Cleanup, Added directory macros in appropriate places</changelog>
<changelog author="jjolly@suse.com" date="1409832000">- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832001">- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832002">- Added all files from %src/doc as rpm %doc (bnc#894780)</changelog>
<changelog author="jjolly@suse.com" date="1409918400">- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1409918401">- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch</changelog>
<changelog author="jjolly@suse.com" date="1439899200">- Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
  - ocki-3.1_01_ep11_makefile.patch
  - ocki-3.1_02_ep11_m_init.patch
  - ocki-3.1_03_ock_obj_mgr.patch
  - ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  - ocki-3.1_05_ep11_readme_update.patch
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - ocki-3.1_06_0005-Small-reworks.patch
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - ocki-3.1_07_0001-Man-page-corrections.patch
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1440072000">- Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
  - Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162)</changelog>
<changelog author="jjolly@suse.com" date="1443787200">- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
  - Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
  - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
  - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)</changelog>
<changelog author="jjolly@suse.com" date="1446811200">- Get a new ldap handle for each session opened in the icsf token,
    once the user has authenticated. (bsc#953347,LTC#130078)
  - ocki-3.2_05_icsf_ldap_handles.patch
  - ocki-3.2_06_icsf_sign_verify.patch</changelog>

</package>

<package pkgid="39afe45f3bca0d4c6ec8d514c72336b885aafb2149300d799d7f948fda8fe703" name="openCryptoki-devel" arch="x86_64">
    <version epoch="0" ver="3.2" rel="4.1"/>

<changelog author="meissner@suse.com" date="1354968000">- remove -o from groupadd
- fixed sed script to not a grouplist with leading ,</changelog>
<changelog author="dvaleev@suse.com" date="1386676800">- enable ppc64le</changelog>
<changelog author="ro@suse.de" date="1391515200">- add aarch64 to 64bit archs</changelog>
<changelog author="jjolly@suse.com" date="1391515201">- Updated to openCryptoki v3.1: See ChangeLog for complete details
  (FATE#315426)
  - opencryptoki-3.1
  - New ep11 token to support IBM Crypto Express adpaters
    (starting with Crypto Express 4S adapters) configured with
    Enterprise PKCS#11(EP11) firmware. (FATE#315330)
  - opencryptoki-3.0
  - New opencryptoki.conf file to replace pk_config_data and
    pkcs11_starup.  The opencryptoki.conf contains slot entry
    information for tokens.
  - Removed pkcs_slot and pkcs11_startup shell scripts.
  - ICA token supports CKM_DES_OFB64, CKM_DES_CFB8, CKM_DES_CFB6
    mechanisms using 3DES keys. (FATE#315323)
  - ICA token supports CKM_DES3_MAC and CKM_DES3_MAC_GENERAL
    mechanisms. (FATE#315323)
  - ICA token supports CKM_AES_OFB, CKM_AES_CFB8, CKM_AES_CFB64,
    CKM_AES_CFB128, CKM_AES_MAC, and CKM_AES_MAC_GENERAL
    mechanisms. (FATE#315323)
  - opencryptoki-2.4.1 (21 Feb 2012)
  - SHA256 support added for CCA token (FATE#315289)
- Using insserv macros in %post, %preun and %postun sections
- Cleaned up spec file
- removed patches:
  - ocki-2.2.6-PIN-backspace.patch
- added patches:
  - ocki-3.1-fix-implicit-decl.patch
  - ocki-3.1-remove-make-install-chgrp-chmod.patch
  - ocki-3.1-fix-init_d-path.patch</changelog>
<changelog author="ro@suse.de" date="1394020800">- fix build on x86 (add CCA and TPM to filelist)
- fix libica detection on s390/s390x to get ICA module built</changelog>
<changelog author="jjolly@suse.com" date="1394193600">- Patches applied (bnc#865549)
  - Fixed Makefile to complement common code dependencies
  - switched to official m_init() function based on library change
  - checking the global token object count
  - catch the return code from object_mgr_find_in_map1
  - some README updates about usage and restrictions</changelog>
<changelog author="jjolly@suse.com" date="1401969600">- EP11 token available in the opencryptoki V3.1 package  (bnc#879303)
  - Specfile changed to include ep11tok.conf
  - Specfile changed to include pkcsep11_migrate and pkcsicsf tools
  - Specfile changed to BuildRequires openldap2-devel
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - print_mechanism() ignored bad returncodes from the called
    function token_specific_get_mechanism_list()
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - Fix failure when confname is not given, use default
    ep11tok.conf instead
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - Removed check for ep11 lib at configure
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - Move stdint.h before zcrypt.h to resolve dependencies
  - ocki-3.1_06_0005-Small-reworks.patch
  - testcase fixes and file permission changes
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - Fix for s390 31-bit build error
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - zcrypt library included in build by default</changelog>
<changelog author="jjolly@suse.com" date="1401969601">- Made ep11tok.conf and pkcsep11_migrate specific to s390/s390x
- Added libpkcs11_ep11.so and libpkcs11_icsf.so to 32-bit s390/s390x</changelog>
<changelog author="jjolly@suse.com" date="1401969602">- Moved libpkcs11_icsf 32-bit out of s390-specific files</changelog>
<changelog author="jjolly@suse.com" date="1403784000">- Several package changes as per bnc#880217
  - Added openCryptoki-tmp.conf for lock directory management
  - Added 'lite' token support
  - Changed from init.d daemon to systemd service
  - Updated macros in %pre %post %preun and %postun sections
  - Added missing icsf and ep11tok directories to %files section
    ocki-3.1_01_ep11_makefile.patch
    ocki-3.1_02_ep11_m_init.patch
- Patches added:
  ocki-3.1-fix-libica-link.patch
  ocki-3.1_03_ock_obj_mgr.patch
  ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  ocki-3.1_05_ep11_readme_update.patch
  ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  ocki-3.1_06_0005-Small-reworks.patch
  ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch</changelog>
<changelog author="sfalken@opensuse.org" date="1408104000">- Specfile Cleanup, Added directory macros in appropriate places</changelog>
<changelog author="jjolly@suse.com" date="1409832000">- Fixed pkcsslotd and opencryptoki.conf man pages (bnc#889183)
- Added patch ocki-3.1_07_0001-Man-page-corrections.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832001">- Added pkcscca utility and documentation to convert private
  token objects from v2 to v3. (bnc#893757)
- Added patches:
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch</changelog>
<changelog author="jjolly@suse.com" date="1409832002">- Added all files from %src/doc as rpm %doc (bnc#894780)</changelog>
<changelog author="jjolly@suse.com" date="1409918400">- Fixed README.ep11_stdll to have Unix-style EOL characters.
- Added patch ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1409918401">- Fixed ica token's SHA update function when passing zero message
  size (bnc#892644)
- Added patch ocki-3.1_10_0001-ica-sha-update-empty-msg.patch</changelog>
<changelog author="jjolly@suse.com" date="1439899200">- Updated to openCryptoki v3.2 (FATE#318240)
- Removed unnecessary patches:
  - ocki-3.1_01_ep11_makefile.patch
  - ocki-3.1_02_ep11_m_init.patch
  - ocki-3.1_03_ock_obj_mgr.patch
  - ocki-3.1_04_ep11_opaque2blob_error_handl.patch
  - ocki-3.1_05_ep11_readme_update.patch
  - ocki-3.1_06_0001-print_mechanism-ignored-bad-returncodes-from-the-cal.patch
  - ocki-3.1_06_0002-Fix-failure-when-confname-is-not-given-use-default-e.patch
  - ocki-3.1_06_0003-Configure-was-checking-for-the-ep11-lib-and-the-m_in.patch
  - ocki-3.1_06_0004-The-asm-zcrypt.h-header-file-uses-some-std-int-types.patch
  - ocki-3.1_06_0005-Small-reworks.patch
  - ocki-3.1_06_0006-The-31-bit-build-on-s390-showed-an-build-error-at-in.patch
  - ocki-3.1_06_0007-ep11-is-not-building-because-not-setting-with_zcrypt.patch
  - ocki-3.1_07_0001-Man-page-corrections.patch
  - ocki-3.1_08_0001-Add-a-pkcscca-tool-to-help-migrate-cca-private-token.patch
  - ocki-3.1_08_0002-Add-documentation-pkcscca-manpage-and-README.cca_std.patch
  - ocki-3.1_09_0001-Fix-EOL-encoding-in-README.patch</changelog>
<changelog author="jjolly@suse.com" date="1440072000">- Fixed BuildRequires: libica2-devel
- Added ocki-3.2_01_fix-return-type-error.patch
- Changing doc/README.ep11_stdll to unix-style EOL
  - Added BuildRequires: dos2unix
- Removed globbing in %files and specified libraries to include (bsc#942162)</changelog>
<changelog author="jjolly@suse.com" date="1443787200">- Added /var/lib/opencryptoki/lite/TOK_OBJ token directory (bsc#943070)
- Added ocki-3.2_02_ep11-token-incorrectly-copied-the-public-key-object-.patch
  - Fixed two public key object inclusion in EP11 token (bsc#946808)
- Added ocki-3.2_03_ICSF-Token-C_SignUpdate-was-sometimes-segfaulting-an.patch
  - Fixed GPF when calling C_SignUpdate using ICFS toekn (bsc#946172)
- Added ocki-3.2_04_CKA_EC_POINT-is-not-required-in-the-ECDSA-private-ke.patch
  - Fixed failure to import ECDSA because of lack of attribute (bsc#948114)</changelog>
<changelog author="jjolly@suse.com" date="1446811200">- Get a new ldap handle for each session opened in the icsf token,
    once the user has authenticated. (bsc#953347,LTC#130078)
  - ocki-3.2_05_icsf_ldap_handles.patch
  - ocki-3.2_06_icsf_sign_verify.patch</changelog>

</package>

<package pkgid="a134744735f47203e2d04ebbe8f69bd79beab6ed90efa4794e310fb8fc24a6c2" name="openssl" arch="src">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="acddcdfd7cbae5839f0eccc94bb5ebf49c0e6dfaaf64de0131b3d1689d6939d0" name="openssl" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="28710c37ec619b5d80b92e8b48030b52d960bc7c8faba22da6a8c12a7a20fb56" name="openssl-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="de4596696dad91085b6e72beda7832a5928b6545dfb48996b84441c18e8e4027" name="openssl-debugsource" arch="x86_64">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="cad8129a56da7b88647b39ad47e1466513009ee8ad6580cf8491b2996c99c86f" name="openssl-doc" arch="noarch">
    <version epoch="0" ver="1.0.1i" rel="6.1"/>

<changelog author="vcizek@suse.com" date="1408017600">- rename README.SuSE (old spelling) to README.SUSE (bnc#889013)</changelog>
<changelog author="meissner@suse.com" date="1408449600">- openssl-1.0.1e-new-fips-reqs.patch refreshed to openssl-1.0.1i-new-fips-reqs.patch:
  refreshed / renamed patch to match 1.0.1i changes.
  - randomness locking is upstream
  - RSA selftest with X9.31 padding is not needed anymore
  - fixed FIPS selftest failures bnc#892477
- openssl-1.0.1i-ppc-asm-update.patch: update for ppc64le</changelog>
<changelog author="vcizek@suse.com" date="1414670400">- security fixes for bnc#901277 and bnc#901223
- NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability.
  OpenSSL only adds downgrade detection support for client applications.
  See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations.
- details of the addressed vulnerabilities:
  * ) SRTP Memory Leak.
    A flaw in the DTLS SRTP extension parsing code allows an attacker, who
    sends a carefully crafted handshake message, to cause OpenSSL to fail
    to free up to 64k of memory causing a memory leak. This could be
    exploited in a Denial Of Service attack. This issue affects OpenSSL
    1.0.1 server implementations for both SSL/TLS and DTLS regardless of
    whether SRTP is used or configured. Implementations of OpenSSL that
    have been compiled with OPENSSL_NO_SRTP defined are not affected.
    (CVE-2014-3513)
  * ) Session Ticket Memory Leak.
    When an OpenSSL SSL/TLS/DTLS server receives a session ticket the
    integrity of that ticket is first verified. In the event of a session
    ticket integrity check failing, OpenSSL will fail to free memory
    causing a memory leak. By sending a large number of invalid session
    tickets an attacker could exploit this issue in a Denial Of Service
    attack.
    (CVE-2014-3567)
  * ) Build option no-ssl3 is incomplete.
    When OpenSSL is configured with "no-ssl3" as a build option, servers
    could accept and complete a SSL 3.0 handshake, and clients could be
    configured to send them.
    (CVE-2014-3568)
  * ) Add support for TLS_FALLBACK_SCSV.
    Client applications doing fallback retries should call
    SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    (CVE-2014-3566)
- added patches:
  * openssl-CVE-2014-3513.patch
  * openssl-CVE-2014-3566.patch
  * openssl-CVE-2014-3567.patch
  * openssl-CVE-2014-3568.patch</changelog>
<changelog author="vcizek@suse.com" date="1416916800">- don't advertise curves we don't support (bnc#906878)
  * added openssl-Added-OPENSSL_NO_EC2M-guards-around-the-preferred-EC.patch</changelog>
<changelog author="meissner@suse.com" date="1418644800">- openssl-urandom-reseeding.patch: constant reseeding from /dev/urandom;
  for every byte pulled, seed with 1 byte from /dev/urandom, also
  change RAND_poll to pull the full state size of the SSLEAY DRBG.
  bsc#908372</changelog>
<changelog author="meissner@suse.com" date="1418990400">- openssl-rsakeygen-minimum-distance.patch: in non-FIPS rsa key
  generation, mirror the maximum and minimum limiters from
  FIPS rsa generation to meet Common Criteria requirements
  on minimum and maximum distances between p and q. bsc#908362</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- X9.31 rand method is not allowed in FIPS mode
  * added openssl-fips_disallow_x931_rand_method.patch
- don't allow dynamic ENGINEs loading in FIPS mode
  * added openssl-fips_disallow_ENGINE_loading.patch
- for both see bnc#855676, comment 16
- added a locking hack which prevents hangs in FIPS mode (bnc#895129)
  * added openssl-1.0.1i-fipslocking.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804800">- make RSA2 key generation FIPS 186-4 compliant (bnc#901902)
  * added openssl-fips_RSA_compute_d_with_lcm.patch</changelog>
<changelog author="vcizek@suse.com" date="1420804801">- fix for several security vulnerabilites:
  * CVE-2014-3570 (bnc#912296)
  - Bignum squaring (BN_sqr) may produce incorrect results on some
    platforms, including x86_64.
  - added openssl-CVE-2014-3570.patch
  * CVE-2014-3571 (bnc#912294)
  - Fix crash in dtls1_get_record whilst in the listen state where
    you get two separate reads performed - one for the header and
    one for the body of the handshake record.
  - added openssl-CVE-2014-3571.patch
  * CVE-2014-3572 (bnc#912015)
  - don't accept a handshake using an ephemeral ECDH ciphersuites
    with the server key exchange message omitted.
  - added openssl-CVE-2014-3572.patch
  * CVE-2014-8275 (bnc#912018)
  - fix various certificate fingerprint issues
  - added openssl-CVE-2014-8275.patch
  * CVE-2015-0204 (bnc#912014)
  - Only allow ephemeral RSA keys in export ciphersuites
  - added openssl-CVE-2015-0204.patch
  * CVE-2015-0205 (bnc#912293)
  - Fix to prevent use of DH client certificates without sending
    certificate verify message.
  - added openssl-CVE-2015-0205.patch
  * CVE-2015-0206 (bnc#912292)
  - memory leak can occur in dtls1_buffer_record
  - added openssl-CVE-2015-0206.patch</changelog>
<changelog author="vcizek@suse.com" date="1422446400">- enforce a limit on minimal length of RSA decryption exponent d
  * added openssl-fips-rsagen-d-bits.patch by Marcus Meissner</changelog>
<changelog author="vcizek@suse.com" date="1426507200">- security update:
  * CVE-2015-0209 (bnc#919648)
  - Fix a failure to NULL a pointer freed on error
  * CVE-2015-0286 (bnc#922496)
  - Segmentation fault in ASN1_TYPE_cmp
  * CVE-2015-0287 (bnc#922499)
  - ASN.1 structure reuse memory corruption
  * CVE-2015-0288 x509: (bnc#920236)
  - added missing public key is not NULL check
  * CVE-2015-0289 (bnc#922500)
  - PKCS7 NULL pointer dereferences
  * CVE-2015-0293 (bnc#922488)
  - Fix reachable assert in SSLv2 servers
  * added patches:
  openssl-CVE-2015-0209.patch
  openssl-CVE-2015-0286.patch
  openssl-CVE-2015-0287.patch
  openssl-CVE-2015-0288.patch
  openssl-CVE-2015-0289.patch
  openssl-CVE-2015-0293.patch</changelog>
<changelog author="vcizek@suse.com" date="1430222400">- the selftests must pass even in non-FIPS mode if the module is
  complete (bnc#926597)
  * added openssl-fips-selftests_in_nonfips_mode.patch</changelog>
<changelog author="vcizek@suse.com" date="1434110400">- CVE-2015-4000 (boo#931698)
  * The Logjam Attack / weakdh.org
  * reject connections with DH parameters shorter than 1024 bits
  * generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
  * Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
  * Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
  * PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
  * CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
  * race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
  * Crash in ssleay_rand_bytes due to locking regression
  * modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- newly added patches:
  * 0001-s_server-Use-2048-bit-DH-parameters-by-default.patch
  * 0002-dhparam-set-the-default-to-2048-bits.patch
  * 0003-dhparam-fix-documentation.patch
  * 0004-Update-documentation-with-Diffie-Hellman-best-practi.patch
  * 0005-client-reject-handshakes-with-DH-parameters-1024-bits.patch
  * openssl-CVE-2015-1788.patch
  * openssl-CVE-2015-1789.patch
  * openssl-CVE-2015-1790.patch
  * openssl-CVE-2015-1791.patch
  * openssl-CVE-2015-1792.patch
  * openssl-RSA_premaster_secret_in_constant_time.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529600">- fix an RSA key generation problem with odd bit sizes (bsc#937212)
  * added openssl-fips-fix-odd-rsakeybits.patch</changelog>
<changelog author="vcizek@suse.com" date="1436529601">- Add POWER8 VMX crypto acceleration (fate#318717, bsc#937634)
- added patches from IBM:
  * 0001-Taking-only-the-struct-change-of-ks-to-ks-ks.patch
  * 0002-Taking-only-the-general-HWAES_-function-declarations.patch
  * 0003-Taking-only-the-change-to-the-preprocessor-condition.patch
  * 0004-evp-e_aes.c-populate-HWAES_-to-remaning-modes.patch
- fix corrupted keyring</changelog>
<changelog author="vcizek@suse.com" date="1438689600">- fixed a regression caused by openssl-CVE-2015-0287.patch
  (bsc#937492)</changelog>
<changelog author="vcizek@suse.com" date="1439467200">- add support for "ciphers" providing no encryption (bsc#937085)
  * don't build with -DSSL_FORBID_ENULL</changelog>
<changelog author="vcizek@suse.com" date="1441368000">- don't build ppc64le as linux-generic32 (bsc#943421)
- modified openssl-1.0.1i-ppc-asm-update.patch
- adding patches:
  0001-Config-for-ppc64-le.patch
  0001-sha-asm-fips.patch
  0002-Delete-OPENSSL-CLEANSE-buplicated.patch
  0003-Missing-function-declarations.patch
  0001-Adding-OPENSSL_cpuid_setup.patch</changelog>
<changelog author="vcizek@suse.com" date="1443009600">- clear openssl error when fips selftests fail in non-fips mode
  (bsc#947104)
  * added openssl-fips-clearerror.patch</changelog>
<changelog author="meissner@suse.com" date="1446638400">- avoid running OPENSSL_config twice. This avoids breaking
  engine loading. (bsc#952871)
- openssl.keyring: replaced with correct release engineer key</changelog>

</package>

<package pkgid="2a116bc260b1835dee01de85056ece588041d02fea634cb48c9d6c8205aedca0" name="plymouth" arch="src">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="beb7c4407c08413257f234a878144693bd77ef76733b76ae7810068bf3c0f0fc" name="plymouth" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="ab2114d01fc8977fa4cecc3db46b93c67756609e8424e8e59a4639cfd01f5032" name="plymouth-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="ce8a35603da7e715319f6bba9e433722b2c44c8db67d036f62333326379cc964" name="plymouth-debugsource" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="c65e6564581527c1624c9900870442e649819f115d6e0a81b50fb3f000eb4e71" name="plymouth-devel" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="70a5966450fc058b6a6e5998bb71c07dec8fe3bbcade1047ec288cfcf07a063e" name="plymouth-dracut" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="6b81f0b8bc6aec6989c9f64bcd0d398a9c686e3663d18412c10384411c16ad61" name="plymouth-plugin-fade-throbber" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="f960f4abd59442c511b060ceeebfa8fa95f5ad015ce64de2b51968df4bbd3ef2" name="plymouth-plugin-fade-throbber-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="844f802b57aeb3b511cdb13b67c8eaeea1da1d2c0ebcfe155406b7a475515add" name="plymouth-plugin-label" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="ee51d0c018d5b9a9dba4691e4785abb0d5803af1f14acda16dedd85f61258aaa" name="plymouth-plugin-label-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="19426982bf6158b01237a775baab93c21310ed30370115ee25c161afc4f9ce3c" name="plymouth-plugin-script" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="ac6e73d6f483a9a81cb063ef2f4bea9d121d2bbc966e98443c769089f69f13ff" name="plymouth-plugin-script-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="6e1ac0ade02fadf8471cab5de1dc80a4721a78c630528b35ad597901a707cd47" name="plymouth-plugin-space-flares" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="0db375184edca60a7d3e49c73e82c59ec65c21b3b4ed26a50d4ec3338e577f0f" name="plymouth-plugin-space-flares-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="d12b01eeb118482034f388414aaad06c7c38988837b29155b921bbf7148d10e0" name="plymouth-plugin-throbgress" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="1e9216967310622643a5f0a99561a04c57d1958c9fb34e1eb0025dcb4bdbe478" name="plymouth-plugin-throbgress-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="1a15a24eed360b3e71e6b0d7aea3e1c2ba5335f5c5d5ed1127bbdc8aba6ccea9" name="plymouth-plugin-tribar" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="479117d91a1d30523515a027d1be27053a963d482daf3c2419ce1e1d903df28c" name="plymouth-plugin-tribar-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="f39e8d7d65755d4f7346085985bb414a1de9ac21ee47c5025bc1e3f1b9a4707f" name="plymouth-plugin-two-step" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="db9134ea74760c02c31658b44be7db305257a9e3665705a51af9e29c53bd8aee" name="plymouth-plugin-two-step-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="f403673ce8111d0d60c867eb0de220b870e25fc3b01137378767b5a299784c1a" name="plymouth-scripts" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="4a135502444c2c4457ca95e10fe31944e085b6349cdaed728513d07998f4ac28" name="plymouth-theme-fade-in" arch="noarch">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="302f461080ff2d8783275e9f7cff82c98e50adc9f736dfe50947713d5de434b1" name="plymouth-theme-script" arch="noarch">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="7d21e6361e5275ea2803a49c0ec79ad9c560c3128dfdfc2e8a2fbf2fbfe1a566" name="plymouth-theme-solar" arch="noarch">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="1c1513ed3d10eb82a960f9a0205a5392ace98408586146201c7147b27bbd0736" name="plymouth-theme-spinfinity" arch="noarch">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="e9db273a3586d87ef7b6c31bb02fdf7c6a0e28f3007ab49dad6da23c8f05fe0a" name="plymouth-theme-spinner" arch="noarch">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="2c50d4cca2ec1fe5f022e1de7ae7db19cfd32659a54e1a11031ccc933fb14a64" name="plymouth-theme-tribar" arch="noarch">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="c7c80588d32158af99ce0dd24c1fbc2895ac5c10e61ddc2f90e80c2a4ef21a3f" name="plymouth-utils" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="38b08501c22396264fff1bc08d6ea04a63c26089d85fa979180b679cf590c665" name="plymouth-utils-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="1ee8703427b1e193711f19ebaa92f4effad0cada23ebbc9e7fd1106150bf11f1" name="plymouth-x11-renderer" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="37488f1b510929455ddb5162865607c7a3bfeda10491e19d1e677107e81b3aa1" name="plymouth-x11-renderer-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.9.0" rel="8.1"/>

<changelog author="fcrozat@suse.com" date="1402056000">- Release 0.9.0 (3 additional fixes compared to previously packaged
  git snapshot):
  + Use udev for graphics device enumeration
  + Add new text plugin to replace the tribar one
  + Add background tiling and watermark support to two-step
  + Make various plymouth commands that change state be resilient
    to being  called multiple times
  + Support going back to the initrd at shutdown
  + Keyfile parser improvements
  + Make plymouthd use better defaults when running on top of X11
  + Fixes for systems using QXL
  + minor two-step plugin fixes
  + Use /sys/class/tty/console/active instead of parsing
    /proc/cmdline for consoles.
  + Documentation improvements
  + Drop driver specific renderers and use generic driver across the
    board.
  + Better debug message output
  + systemd integration fixes
  + upstart integration fixes
  + initrd scripts fixes
  + Misc fixes</changelog>
<changelog author="fcrozat@suse.com" date="1403179200">- Add
  0001-splash-remove-pixel_pixel-in-sprite-lib-when-notifie.patch:
  fix crash when pixel_display is removed.
- Add 0001-device-manager-only-call-ply_terminal_free.patch: fix
  crash.
- Add use-mkinitrd.patch: call mkinitrd -B, not dracut for now,
  otherwise initramfs is being created by plymouth-update-initrd,
  not initrd file.
- Ensure we don't rebuild initrd twice when updating plymouth.
- Ensure default theme is SLE/openSUSE (based on %suse_version)</changelog>
<changelog author="fcrozat@suse.com" date="1403265600">- Add
  0001-splash-do-not-process-display-lists-if-it-is-empty.patch:
  fix crash when calling plymouth quit
- Add 0001-seats-guard-against-NULL-terminal.patch: guard against
  NULL terminal.
- Update stop-graphical.patch: add RemainAfterExit=true to
  plymouth-start.service, ensuring plymouthd is not restarted when
  switching between runlevels.</changelog>
<changelog author="fcrozat@suse.com" date="1403870400">- Add
  0001-libply-splash-core-also-monitor-for-file-removal-in-.patch:
  handle new udev behaviour in seqnum removal.</changelog>
<changelog author="fcrozat@suse.com" date="1404820800">- Update 0001-Some-greenish-openSUSE-colors.patch to also use SUSE
  colors on tribar [bnc#886148]</changelog>
<changelog author="fcrozat@suse.com" date="1406203200">- Add
  0001-seat-be-a-little-more-forgiving-in-the-case-there-s-.patch:
  Be more forgiving with empty seat.</changelog>
<changelog author="fcrozat@suse.com" date="1406289600">- Add plymouth-ignore-cirrusdrm.patch: ignore cirrus drm and use fb
  instead [bnc#888590]</changelog>
<changelog author="fcrozat@suse.com" date="1406548800">- Add
  0001-text-step-bar-use-correct-utf-8-multibyte-sequence-f.patch:
  fix incorrect UTF-8 code used for square [bnc#886148].</changelog>
<changelog author="idonmez@suse.com" date="1407412800">- Invert the logic in plymouth-ignore-cirrusdrm.patch bnc#890516</changelog>
<changelog author="idonmez@suse.com" date="1407758400">- Modify plymouth-ignore-cirrusdrm.patch to return as
  early as possible. Patch by glin@suse.com</changelog>
<changelog author="idonmez@suse.com" date="1409832000">- Add plymouth-boot-vga-framebuffer.patch to fix boot_vga
  problem with framebuffer devices. (bnc#886211)</changelog>
<changelog author="idonmez@suse.com" date="1410523200">- Add 0001-let-it-become-a-real-daemon.patch to make plymouth
  a real daemon, fixes part of bnc#889757. Patch by Werner.</changelog>
<changelog author="idonmez@suse.com" date="1411646400">- Update 0001-let-it-become-a-real-daemon.patch to call setsid
  only from the child process.</changelog>
<changelog author="idonmez@suse.com" date="1430827200">- Update stop-graphical.patch to add RemainAfterExit=yes to
  plymouth-start.service as noted by Egbert in bsc#929616. This
  will also fix the real bug behind bsc#923992</changelog>
<changelog author="idonmez@suse.com" date="1433764800">- Properly filter escape sequences bnc#926742</changelog>
<changelog author="werner@suse.de" date="1435579200">- Add holding_hands.patch to make  sure that the request of
  init=/bin/bash does not forget plymouth.enable=0 (bsc#936005)</changelog>
<changelog author="idonmez@suse.com" date="1443441600">- Update plymouth-filter-escape-codes.patch to fix possible buffer
  overrun. Should fix bnc#946986 and bnc#946640.</changelog>
<changelog author="idonmez@suse.com" date="1444219200">- Rewrite version handling in the spec file to avoid hardcoding
  SLE versions, related to bsc#949046</changelog>
<changelog author="idonmez@suse.com" date="1445860800">- Fix a thinko in plymouth-filter-escape-codes.patch which filters
  out useful control characters. Fixes bsc#951983</changelog>
<changelog author="idonmez@suse.com" date="1446206400">- Add bsc-939204.patch to make sure plymouth-reboot always restarts
  if needed to show all the log messages. Also make sure it has no
  After= dependencies in the service file. (bsc#939204)</changelog>

</package>

<package pkgid="d3a6bac5565ce723d7ced67750f9b9460ca146cd090c4a56cafb66afbf9b8567" name="putty" arch="src">
    <version epoch="0" ver="0.66" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1311681600">- Initial package for build.opensuse.org</changelog>
<changelog author="andreas.stieger@gmx.de" date="1323604800">- update to upstream 0.62:
  * Security fix: PuTTY no longer retains passwords in memory by
  mistake.
  * Bug fix: Pageant now talks to both new-style clients (0.61 and
  above) and old-style (0.60 and below).
  * Bug fix: PuTTY no longer prints a spurious "Access denied"
  message when GSSAPI authentication fails.
  * Bug fix: PSCP and PSFTP now honour nonstandard port numbers in
  SSH saved sessions.
  * Bug fix: Pageant no longer leaks a file handle when an
  authentication fails.
  * Bug fix: PuTTYtel no longer crashes when saving a session.
  * Bug fix: PuTTY now draws underlines under the underlined text
  instead of sometimes putting them somewhere off to the right.
  * Bug fix: PuTTY now should not draw VT100 line drawing characters
  at the wrong vertical offset.
- fix SLE build</changelog>
<changelog author="andreas.stieger@gmx.de" date="1375790400">- update to 0.63
  * Security fix: prevent a nefarious SSH server or network attacker
    from crashing PuTTY at startup in three different ways by
    presenting a maliciously constructed public key and signature.
    [bnc#833567] CVE-2013-4852
  * Security fix: PuTTY no longer retains the private half of users'
    keys in memory by mistake after authenticating with them.
  * Revamped the internal configuration storage system to remove all
    fixed arbitrary limits on string lengths. In particular, there
    should now no longer be an unreasonably small limit on the number
    of port forwardings PuTTY can store.
  * Forwarded TCP connections which close one direction before the
    other should now be reliably supported, with EOF propagated
    independently in the two directions. This also fixes some instances
    of forwarding data corruption (if the corruption consisted of
    losing data from the very end of the connection) and some instances
    of PuTTY failing to close when the session is over (because it
    wrongly thought a forwarding channel was still active when it was
    not).
  * The terminal emulation now supports xterm's bracketed paste mode
    (allowing aware applications to tell the difference between typed
    and pasted text, so that e.g. editors need not apply inappropriate
    auto-indent).
  * You can now choose to display bold text by both brightening the
    foreground colour and changing the font, not just one or the other.
  * PuTTYgen will now never generate a 2047-bit key when asked for 2048
    (or more generally n−1 bits when asked for n).
  * Some updates to default settings: PuTTYgen now generates 2048-bit
    keys by default (rather than 1024), and PuTTY defaults to UTF-8
    encoding and 2000 lines of scrollback (rather than ISO 8859-1 and
    200).
  * Unix: PSCP and PSFTP now preserve the Unix file permissions, on
    copies in both directions.
  * Unix: dead keys and compose-character sequences are now supported.
  * Unix: PuTTY and pterm now permit font fallback (where glyphs not
    present in your selected font are automatically filled in from other
    fonts on the system) even if you are using a server-side X11 font
    rather than a Pango client-side one.
  * Bug fixes too numerous to list, mostly resulting from running the
    code through Coverity Scan which spotted an assortment of memory
    and resource leaks, logic errors, and crashes in various circumstances.
- packaging changes:
  * run make from base directory
  * run tests
  * remove putty-01-werror.diff (currently not needed)
  * remove putty-02-remove-gtk1.diff, putty-05-glib-deprecated.diff,
    putty-06-gtk2-indivhdr.diff (no longer needed)
  * refresh putty-03-config.diff
  * remove autoconf calls and requirements
  * package HTML documentation
  * package LICENCE file</changelog>
<changelog author="jengelh@inai.de" date="1375790401">- Do signature verification</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Add 0001-Revert-the-default-for-font-bolding-style.patch
  (upstream patch fixing a cosmetic change introduced in 0.63)
- Add Conflict tag against pssh package (Parallel SSH) due to
  conflicting files in /usr/bin</changelog>
<changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
<changelog author="jengelh@inai.de" date="1425297600">- Update to new upstream release 0.64
  * Security fix: PuTTY no longer retains the private half of users'
  keys in memory by mistake after authenticating with them.
  [bnc#920167] (CVE-2015-2157)
  * Support for SSH connection sharing, so that multiple instances of
  PuTTY to the same host can share a single SSH connection instead
  of all having to log in independently.
  * Bug fix: IPv6 literals are handled sensibly throughout the suite,
  if you enclose them in square brackets to prevent the colons
  being mistaken for a :port suffix.
- Remove 0001-Revert-the-default-for-font-bolding-style.patch
  (merged upstream), putty-04-nodate.diff (no longer needed).</changelog>
<changelog author="aj@ajaissle.de" date="1431518400">- Build icons and add a .desktop file for putty</changelog>
<changelog author="jengelh@inai.de" date="1437998400">- Update to new upstream release 0.65
  * Cryptography speedup on 64-bit Unix platforms by using gcc and
  clang's __uint128_t built-in type.
  * Bug fix: PSFTP now returns a failure exit status if a command
  fails in a batch-mode script.
  * Bug fix: ESC [ 13 t can no longer elicit an invalid escape
  sequence as a response.</changelog>
<changelog author="jengelh@inai.de" date="1447070400">- Update to new upstream release 0.66
  * Resolve integer overflow, buffer underrun in terminal emulator's
  ECH handling. [CVE-2015-5309, bnc#954191]
  * Resolve format string vulnerabilities</changelog>

</package>

<package pkgid="bf5bf70ccb05fa89133cfb10d2624980aa8307ce9aff74f4a5f56a06fefa3af9" name="putty" arch="x86_64">
    <version epoch="0" ver="0.66" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1311681600">- Initial package for build.opensuse.org</changelog>
<changelog author="andreas.stieger@gmx.de" date="1323604800">- update to upstream 0.62:
  * Security fix: PuTTY no longer retains passwords in memory by
  mistake.
  * Bug fix: Pageant now talks to both new-style clients (0.61 and
  above) and old-style (0.60 and below).
  * Bug fix: PuTTY no longer prints a spurious "Access denied"
  message when GSSAPI authentication fails.
  * Bug fix: PSCP and PSFTP now honour nonstandard port numbers in
  SSH saved sessions.
  * Bug fix: Pageant no longer leaks a file handle when an
  authentication fails.
  * Bug fix: PuTTYtel no longer crashes when saving a session.
  * Bug fix: PuTTY now draws underlines under the underlined text
  instead of sometimes putting them somewhere off to the right.
  * Bug fix: PuTTY now should not draw VT100 line drawing characters
  at the wrong vertical offset.
- fix SLE build</changelog>
<changelog author="andreas.stieger@gmx.de" date="1375790400">- update to 0.63
  * Security fix: prevent a nefarious SSH server or network attacker
    from crashing PuTTY at startup in three different ways by
    presenting a maliciously constructed public key and signature.
    [bnc#833567] CVE-2013-4852
  * Security fix: PuTTY no longer retains the private half of users'
    keys in memory by mistake after authenticating with them.
  * Revamped the internal configuration storage system to remove all
    fixed arbitrary limits on string lengths. In particular, there
    should now no longer be an unreasonably small limit on the number
    of port forwardings PuTTY can store.
  * Forwarded TCP connections which close one direction before the
    other should now be reliably supported, with EOF propagated
    independently in the two directions. This also fixes some instances
    of forwarding data corruption (if the corruption consisted of
    losing data from the very end of the connection) and some instances
    of PuTTY failing to close when the session is over (because it
    wrongly thought a forwarding channel was still active when it was
    not).
  * The terminal emulation now supports xterm's bracketed paste mode
    (allowing aware applications to tell the difference between typed
    and pasted text, so that e.g. editors need not apply inappropriate
    auto-indent).
  * You can now choose to display bold text by both brightening the
    foreground colour and changing the font, not just one or the other.
  * PuTTYgen will now never generate a 2047-bit key when asked for 2048
    (or more generally n−1 bits when asked for n).
  * Some updates to default settings: PuTTYgen now generates 2048-bit
    keys by default (rather than 1024), and PuTTY defaults to UTF-8
    encoding and 2000 lines of scrollback (rather than ISO 8859-1 and
    200).
  * Unix: PSCP and PSFTP now preserve the Unix file permissions, on
    copies in both directions.
  * Unix: dead keys and compose-character sequences are now supported.
  * Unix: PuTTY and pterm now permit font fallback (where glyphs not
    present in your selected font are automatically filled in from other
    fonts on the system) even if you are using a server-side X11 font
    rather than a Pango client-side one.
  * Bug fixes too numerous to list, mostly resulting from running the
    code through Coverity Scan which spotted an assortment of memory
    and resource leaks, logic errors, and crashes in various circumstances.
- packaging changes:
  * run make from base directory
  * run tests
  * remove putty-01-werror.diff (currently not needed)
  * remove putty-02-remove-gtk1.diff, putty-05-glib-deprecated.diff,
    putty-06-gtk2-indivhdr.diff (no longer needed)
  * refresh putty-03-config.diff
  * remove autoconf calls and requirements
  * package HTML documentation
  * package LICENCE file</changelog>
<changelog author="jengelh@inai.de" date="1375790401">- Do signature verification</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Add 0001-Revert-the-default-for-font-bolding-style.patch
  (upstream patch fixing a cosmetic change introduced in 0.63)
- Add Conflict tag against pssh package (Parallel SSH) due to
  conflicting files in /usr/bin</changelog>
<changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
<changelog author="jengelh@inai.de" date="1425297600">- Update to new upstream release 0.64
  * Security fix: PuTTY no longer retains the private half of users'
  keys in memory by mistake after authenticating with them.
  [bnc#920167] (CVE-2015-2157)
  * Support for SSH connection sharing, so that multiple instances of
  PuTTY to the same host can share a single SSH connection instead
  of all having to log in independently.
  * Bug fix: IPv6 literals are handled sensibly throughout the suite,
  if you enclose them in square brackets to prevent the colons
  being mistaken for a :port suffix.
- Remove 0001-Revert-the-default-for-font-bolding-style.patch
  (merged upstream), putty-04-nodate.diff (no longer needed).</changelog>
<changelog author="aj@ajaissle.de" date="1431518400">- Build icons and add a .desktop file for putty</changelog>
<changelog author="jengelh@inai.de" date="1437998400">- Update to new upstream release 0.65
  * Cryptography speedup on 64-bit Unix platforms by using gcc and
  clang's __uint128_t built-in type.
  * Bug fix: PSFTP now returns a failure exit status if a command
  fails in a batch-mode script.
  * Bug fix: ESC [ 13 t can no longer elicit an invalid escape
  sequence as a response.</changelog>
<changelog author="jengelh@inai.de" date="1447070400">- Update to new upstream release 0.66
  * Resolve integer overflow, buffer underrun in terminal emulator's
  ECH handling. [CVE-2015-5309, bnc#954191]
  * Resolve format string vulnerabilities</changelog>

</package>

<package pkgid="e5f11beb725f6e8a2659ceddf72633797f0b09ee6d60df3d6e2ee40be6ae0c99" name="putty-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.66" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1311681600">- Initial package for build.opensuse.org</changelog>
<changelog author="andreas.stieger@gmx.de" date="1323604800">- update to upstream 0.62:
  * Security fix: PuTTY no longer retains passwords in memory by
  mistake.
  * Bug fix: Pageant now talks to both new-style clients (0.61 and
  above) and old-style (0.60 and below).
  * Bug fix: PuTTY no longer prints a spurious "Access denied"
  message when GSSAPI authentication fails.
  * Bug fix: PSCP and PSFTP now honour nonstandard port numbers in
  SSH saved sessions.
  * Bug fix: Pageant no longer leaks a file handle when an
  authentication fails.
  * Bug fix: PuTTYtel no longer crashes when saving a session.
  * Bug fix: PuTTY now draws underlines under the underlined text
  instead of sometimes putting them somewhere off to the right.
  * Bug fix: PuTTY now should not draw VT100 line drawing characters
  at the wrong vertical offset.
- fix SLE build</changelog>
<changelog author="andreas.stieger@gmx.de" date="1375790400">- update to 0.63
  * Security fix: prevent a nefarious SSH server or network attacker
    from crashing PuTTY at startup in three different ways by
    presenting a maliciously constructed public key and signature.
    [bnc#833567] CVE-2013-4852
  * Security fix: PuTTY no longer retains the private half of users'
    keys in memory by mistake after authenticating with them.
  * Revamped the internal configuration storage system to remove all
    fixed arbitrary limits on string lengths. In particular, there
    should now no longer be an unreasonably small limit on the number
    of port forwardings PuTTY can store.
  * Forwarded TCP connections which close one direction before the
    other should now be reliably supported, with EOF propagated
    independently in the two directions. This also fixes some instances
    of forwarding data corruption (if the corruption consisted of
    losing data from the very end of the connection) and some instances
    of PuTTY failing to close when the session is over (because it
    wrongly thought a forwarding channel was still active when it was
    not).
  * The terminal emulation now supports xterm's bracketed paste mode
    (allowing aware applications to tell the difference between typed
    and pasted text, so that e.g. editors need not apply inappropriate
    auto-indent).
  * You can now choose to display bold text by both brightening the
    foreground colour and changing the font, not just one or the other.
  * PuTTYgen will now never generate a 2047-bit key when asked for 2048
    (or more generally n−1 bits when asked for n).
  * Some updates to default settings: PuTTYgen now generates 2048-bit
    keys by default (rather than 1024), and PuTTY defaults to UTF-8
    encoding and 2000 lines of scrollback (rather than ISO 8859-1 and
    200).
  * Unix: PSCP and PSFTP now preserve the Unix file permissions, on
    copies in both directions.
  * Unix: dead keys and compose-character sequences are now supported.
  * Unix: PuTTY and pterm now permit font fallback (where glyphs not
    present in your selected font are automatically filled in from other
    fonts on the system) even if you are using a server-side X11 font
    rather than a Pango client-side one.
  * Bug fixes too numerous to list, mostly resulting from running the
    code through Coverity Scan which spotted an assortment of memory
    and resource leaks, logic errors, and crashes in various circumstances.
- packaging changes:
  * run make from base directory
  * run tests
  * remove putty-01-werror.diff (currently not needed)
  * remove putty-02-remove-gtk1.diff, putty-05-glib-deprecated.diff,
    putty-06-gtk2-indivhdr.diff (no longer needed)
  * refresh putty-03-config.diff
  * remove autoconf calls and requirements
  * package HTML documentation
  * package LICENCE file</changelog>
<changelog author="jengelh@inai.de" date="1375790401">- Do signature verification</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Add 0001-Revert-the-default-for-font-bolding-style.patch
  (upstream patch fixing a cosmetic change introduced in 0.63)
- Add Conflict tag against pssh package (Parallel SSH) due to
  conflicting files in /usr/bin</changelog>
<changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
<changelog author="jengelh@inai.de" date="1425297600">- Update to new upstream release 0.64
  * Security fix: PuTTY no longer retains the private half of users'
  keys in memory by mistake after authenticating with them.
  [bnc#920167] (CVE-2015-2157)
  * Support for SSH connection sharing, so that multiple instances of
  PuTTY to the same host can share a single SSH connection instead
  of all having to log in independently.
  * Bug fix: IPv6 literals are handled sensibly throughout the suite,
  if you enclose them in square brackets to prevent the colons
  being mistaken for a :port suffix.
- Remove 0001-Revert-the-default-for-font-bolding-style.patch
  (merged upstream), putty-04-nodate.diff (no longer needed).</changelog>
<changelog author="aj@ajaissle.de" date="1431518400">- Build icons and add a .desktop file for putty</changelog>
<changelog author="jengelh@inai.de" date="1437998400">- Update to new upstream release 0.65
  * Cryptography speedup on 64-bit Unix platforms by using gcc and
  clang's __uint128_t built-in type.
  * Bug fix: PSFTP now returns a failure exit status if a command
  fails in a batch-mode script.
  * Bug fix: ESC [ 13 t can no longer elicit an invalid escape
  sequence as a response.</changelog>
<changelog author="jengelh@inai.de" date="1447070400">- Update to new upstream release 0.66
  * Resolve integer overflow, buffer underrun in terminal emulator's
  ECH handling. [CVE-2015-5309, bnc#954191]
  * Resolve format string vulnerabilities</changelog>

</package>

<package pkgid="24c58a05360fee82a5253a135faf718e9e189607407f89d7c9efa1efe412d014" name="putty-debugsource" arch="x86_64">
    <version epoch="0" ver="0.66" rel="6.1"/>

<changelog author="jengelh@medozas.de" date="1311681600">- Initial package for build.opensuse.org</changelog>
<changelog author="andreas.stieger@gmx.de" date="1323604800">- update to upstream 0.62:
  * Security fix: PuTTY no longer retains passwords in memory by
  mistake.
  * Bug fix: Pageant now talks to both new-style clients (0.61 and
  above) and old-style (0.60 and below).
  * Bug fix: PuTTY no longer prints a spurious "Access denied"
  message when GSSAPI authentication fails.
  * Bug fix: PSCP and PSFTP now honour nonstandard port numbers in
  SSH saved sessions.
  * Bug fix: Pageant no longer leaks a file handle when an
  authentication fails.
  * Bug fix: PuTTYtel no longer crashes when saving a session.
  * Bug fix: PuTTY now draws underlines under the underlined text
  instead of sometimes putting them somewhere off to the right.
  * Bug fix: PuTTY now should not draw VT100 line drawing characters
  at the wrong vertical offset.
- fix SLE build</changelog>
<changelog author="andreas.stieger@gmx.de" date="1375790400">- update to 0.63
  * Security fix: prevent a nefarious SSH server or network attacker
    from crashing PuTTY at startup in three different ways by
    presenting a maliciously constructed public key and signature.
    [bnc#833567] CVE-2013-4852
  * Security fix: PuTTY no longer retains the private half of users'
    keys in memory by mistake after authenticating with them.
  * Revamped the internal configuration storage system to remove all
    fixed arbitrary limits on string lengths. In particular, there
    should now no longer be an unreasonably small limit on the number
    of port forwardings PuTTY can store.
  * Forwarded TCP connections which close one direction before the
    other should now be reliably supported, with EOF propagated
    independently in the two directions. This also fixes some instances
    of forwarding data corruption (if the corruption consisted of
    losing data from the very end of the connection) and some instances
    of PuTTY failing to close when the session is over (because it
    wrongly thought a forwarding channel was still active when it was
    not).
  * The terminal emulation now supports xterm's bracketed paste mode
    (allowing aware applications to tell the difference between typed
    and pasted text, so that e.g. editors need not apply inappropriate
    auto-indent).
  * You can now choose to display bold text by both brightening the
    foreground colour and changing the font, not just one or the other.
  * PuTTYgen will now never generate a 2047-bit key when asked for 2048
    (or more generally n−1 bits when asked for n).
  * Some updates to default settings: PuTTYgen now generates 2048-bit
    keys by default (rather than 1024), and PuTTY defaults to UTF-8
    encoding and 2000 lines of scrollback (rather than ISO 8859-1 and
    200).
  * Unix: PSCP and PSFTP now preserve the Unix file permissions, on
    copies in both directions.
  * Unix: dead keys and compose-character sequences are now supported.
  * Unix: PuTTY and pterm now permit font fallback (where glyphs not
    present in your selected font are automatically filled in from other
    fonts on the system) even if you are using a server-side X11 font
    rather than a Pango client-side one.
  * Bug fixes too numerous to list, mostly resulting from running the
    code through Coverity Scan which spotted an assortment of memory
    and resource leaks, logic errors, and crashes in various circumstances.
- packaging changes:
  * run make from base directory
  * run tests
  * remove putty-01-werror.diff (currently not needed)
  * remove putty-02-remove-gtk1.diff, putty-05-glib-deprecated.diff,
    putty-06-gtk2-indivhdr.diff (no longer needed)
  * refresh putty-03-config.diff
  * remove autoconf calls and requirements
  * package HTML documentation
  * package LICENCE file</changelog>
<changelog author="jengelh@inai.de" date="1375790401">- Do signature verification</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Add 0001-Revert-the-default-for-font-bolding-style.patch
  (upstream patch fixing a cosmetic change introduced in 0.63)
- Add Conflict tag against pssh package (Parallel SSH) due to
  conflicting files in /usr/bin</changelog>
<changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
<changelog author="jengelh@inai.de" date="1425297600">- Update to new upstream release 0.64
  * Security fix: PuTTY no longer retains the private half of users'
  keys in memory by mistake after authenticating with them.
  [bnc#920167] (CVE-2015-2157)
  * Support for SSH connection sharing, so that multiple instances of
  PuTTY to the same host can share a single SSH connection instead
  of all having to log in independently.
  * Bug fix: IPv6 literals are handled sensibly throughout the suite,
  if you enclose them in square brackets to prevent the colons
  being mistaken for a :port suffix.
- Remove 0001-Revert-the-default-for-font-bolding-style.patch
  (merged upstream), putty-04-nodate.diff (no longer needed).</changelog>
<changelog author="aj@ajaissle.de" date="1431518400">- Build icons and add a .desktop file for putty</changelog>
<changelog author="jengelh@inai.de" date="1437998400">- Update to new upstream release 0.65
  * Cryptography speedup on 64-bit Unix platforms by using gcc and
  clang's __uint128_t built-in type.
  * Bug fix: PSFTP now returns a failure exit status if a command
  fails in a batch-mode script.
  * Bug fix: ESC [ 13 t can no longer elicit an invalid escape
  sequence as a response.</changelog>
<changelog author="jengelh@inai.de" date="1447070400">- Update to new upstream release 0.66
  * Resolve integer overflow, buffer underrun in terminal emulator's
  ECH handling. [CVE-2015-5309, bnc#954191]
  * Resolve format string vulnerabilities</changelog>

</package>

<package pkgid="d3f438b3c5b33d46ea45f8bdd8cc40b21571dfaf2f5bd86481da5c700152f50a" name="python-ipa_hbac" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="b1845bb7f82c0ebd486812ea53891967e115798c4ff2b2a12eb4060bb4281221" name="python-ipa_hbac-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="9407e9277585b056b811ca9f30f102db77fed19fd4293287f71dceb4e5ca7aa2" name="python-libmount" arch="src">
    <version epoch="0" ver="2.25" rel="12.5"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="244517e603c5b1d712eff1cb3d4b9756335e9919be0617c2dd0758bdd89daf8a" name="python-libmount" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.5"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="1c9156f0704082998e43f60da3a1583aa55689ff265b3c556ba3b96c82f63795" name="python-libmount-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.5"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="1b394c925e1979101fc7a19f2f78fa76cb35b033042400c693c6ecebcfc313e8" name="python-libmount-debugsource" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.5"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="3ce8f8059fc1c81ad0d9450d632b9b1db9f5302119975f0f5e065ee5a339cf63" name="python-sss_nss_idmap" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="b2dcdf82228320a708ae51f43f65c283582d77dadd14311803872e0a29422d86" name="python-sss_nss_idmap-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="82972f4891bc42630d154a821578583f01bb438d05c5b01ed7fded720077d322" name="python-sssd-config" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="48fec0ef48e8dfff0562462994417d9b9eceb7e1142bfd1a4d401e4267b972b2" name="python-sssd-config-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="8ba8a553c1510dd658ece803aaf69b67e07b0e344377e5c18abef3c2c61cc30e" name="sssd" arch="src">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="90ccae855f370c8c5a15bbf74bff6abfd23a5345403f225610da6ed1463d5696" name="sssd" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="25d8265eb4626762be15f38b4f7c5a026541c1ef83b1fe35df4f97019517516e" name="sssd-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="f41611208c6e537a5780b3c314da31701a220de65e60bf87cda40c49d7c0c9fc" name="sssd-ad" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="d9e3a83dae3ce16aedc1616b42696fde5849fe89650eb5f6b99b09df3262bf80" name="sssd-ad-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="3acdc9e015062c92135acd02fe422a2008f6bcedce480161e1aee6aff6fc30d7" name="sssd-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="a37a07f46270edc0cc45e5559e70d8b9d8740ff5e9d6c0fe2b8eba194abc7b2d" name="sssd-debuginfo-32bit" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="783bacf564a6539fead7e60d28f5d66772dc9cc355d5d1c7f0d08fc568828989" name="sssd-debugsource" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="d4f30db40680bf744790bb8ae533cdb0ea70683cdfedcae20955a89734498961" name="sssd-ipa" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="50760ee2371117dfe2b152529c0e96cf76171396843b557236e95a5fd34086a6" name="sssd-ipa-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="af5ab2fc71fb51ffb6577e4749e0204bc51cc67f6f49f4ef34afe72895aed2cf" name="sssd-krb5" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="9d588e0b58c70815c914e83b9682691da149fb8aee95f3b0a416df65a430cd14" name="sssd-krb5-common" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="4c41ba189ca4b5fe5f727dd87311d785b7c75033807c8cecf307bd1bda0d1134" name="sssd-krb5-common-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="8191081ec50040cb82fd26b3f25e19f4186e280b0db7df81ea872f8cd9bd3b01" name="sssd-krb5-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="ddf20b0d0984f4a2981b4a4bb3cf43abe9a75df2171819e5e4667244ef769b58" name="sssd-ldap" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="310d83e0975d1592eae35ce30cc053a732166bd67977f8f1097d04fdbb4447d1" name="sssd-ldap-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="33215160195943b90b7e9cd49ecb8ef0398531d210d954db1150aef76f989248" name="sssd-proxy" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="dd9bcb6a2d6fa6954665cc7041b257f7bd5d965a62b742d1d4d2e26e66bd3940" name="sssd-proxy-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="43ffdaabc71ee7780bc9a608cd35cd85c45862e4e0b6fd3200f029912f4a6edb" name="sssd-tools" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="0059cfbaaab0e15223d6580c0adb3342a814c556a6ed05d195932fa1b809b75e" name="sssd-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="1.11.5.1" rel="7.1"/>

<changelog author="rhafer@suse.com" date="1359633600">- update to 1.9.4 (bnc#801036):
  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
    conditions when creating or removing home directories for users
    in local domain
  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
    reads in autofs and ssh responder
  * The sssd_pam responder processes pending requests after
    reconnect
  * A serious memory leak in the NSS responder was fixed
  * Requests that were processing group entries with DNs pointing
    out of any configured search bases were not terminated
    correctly, causing long timeouts
  * Kerberos tickets are correctly renewed even after SSSD daemon
    restart
  * Multiple fixes related to SUDO integration, in particular
    fixing functionality when the sssd back end process was
    changing its online/offline status
  * The pwd_exp_warning option was fixed to function as documented
    in the manual page
- refreshed sssd-ldflags.diff to apply cleanly</changelog>
<changelog author="rhafer@suse.com" date="1360324800">- fix package name in baselibs.conf (bnc#796423)</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),
  added sssd-sysdb-binary-attrs.diff
- Added sssd-no-ldb-check.diff so that SSSD continues to start
  even after an LDB update.</changelog>
<changelog author="rhafer@suse.com" date="1363780800">- Fixed security issue: CVE-2013-0287 (bnc#809153):
  When SSSD is configured as an Active Directory client by using
  the new Active Directory provider or equivalent configuration
  of the LDAP provider, the Simple Access Provider does not
  handle access control correctly.  If any groups are specified
  with the simple_deny_groups option, the group members are
  permitted access. New patches:
  * Provide-a-be_get_account_info_send-function.patch
  * Add-unit-tests-for-simple-access-test-by-groups.patch
  * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch
  * Resolve-GIDs-in-the-simple-access-provider.patch</changelog>
<changelog author="jengelh@inai.de" date="1365163200">- Implement signature verification</changelog>
<changelog author="jengelh@inai.de" date="1367496000">- Update to new upstream release 1.9.5
  * Includes a fix for CVE-2013-0287: A simple access provider flaw
  prevents intended ACL use when SSSD is configured as an Active
  Directory client.
  * Fixed spurious password expiration warning that was printed on
  login with the Kerberos back end.
  * A new option ldap_rfc2307_fallback_to_local_users was added. If
  this option is set to true, SSSD is be able to resolve local
  group members of LDAP groups.
  * Fixed an indexing bug that prevented the contents of autofs maps
  from being returned to the automounter deamon in case the map
  contained a large number of entries.
  * Several fixes for safer handling of Kerberos credential caches
  for cases where the ccache is set to be stored in a DIR: type.
- Remove Provide-a-be_get_account_info_send-function.patch,
  Add-unit-tests-for-simple-access-test-by-groups.patch,
  Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch,
  Resolve-GIDs-in-the-simple-access-provider.patch
  (CVE-2013-0287 material is in upstream),
  sssd-sysdb-binary-attrs.diff (merged upstream)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly formulate SASL BuildRequires</changelog>
<changelog author="jengelh@inai.de" date="1378209600">- Update to new upstream release 1.11.0
  * The sudo integration was made more robust. SSSD is now able to
  gracefully handle situations where it is not able to resolve the
  client host name or sudo rules have multiple name attributes.
  * Several nested group membership bugs were fixed
  * The PAC responder was made more robust and efficient, modifying
  existing cache entries instead of always recreating them.
  * The Kerberos provider now supports the new KEYRING ccache type.
- Remove sssd-no-ldb-check.diff, now implemented through a
  configure argument --disable-ldb-version-check</changelog>
<changelog author="jengelh@inai.de" date="1383307200">- Update to new upstream release 1.11.2
  * A new option ad_access_filter was added. This option allows the
  administrator to easily configure LDAP search filter that the users
  logging in must match in order to be granted access.
  * The Kerberos provider will no longer try to create public
  directories when evaluating the krb5_ccachedir option.
- Remove 0005-implicit-decl.diff (merged upstream)</changelog>
<changelog author="ckornacker@suse.com" date="1385640000">- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)</changelog>
<changelog author="jengelh@inai.de" date="1387540800">- Update to new upstream release 1.11.3
  * The AD provider is able to resolve group memberships for groups
  with Global and Universal scope
  * The initgroups (get groups for user) operation for users from
  trusted AD domains was made more reliable by reading the required
  tokenGroups attribute from LDAP instead of Global Catalog
  * A new option ad_enable_gc was added to the AD provider. This
  option allows the administrator to force SSSD to talk to LDAP
  port only and never try the Global Catalog
  * The AD provider is now able to leverage the tokenGroups attribute
  even when POSIX attributes are used, providing better performance
  during logins.
  * A memory leak in the NSS responder that affected long-lived
  clients that requested netgroup data was fixed
- Remove sssd-ldflags.diff (merged upstream)</changelog>
<changelog author="varkoly@suse.com" date="1398254400">- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching
  * AD Enumeration reads data from LDAP while regular lookups connect to GC
  * Implement heuristics to detect if POSIX attributes have been replicated to the Global Catalog or not
  * sssd_be crashes when ad_access_filter uses FOREST keyword.
  * "System Error" when invalid ad_access_filter is used
  * RHEL7 sssd not setting IPA AD trusted user homedir
  * Enabling ldap_id_mapping doesn't exclude uidNumber in filter
  * FAST does not work in SSSD 1.11.2 in Fedora 20
  * Access denied for users from gc domain when using format DOMAIN\user
  * Group membership lookup issue
  * Group lookup does not return member with multiple names after user lookup
  * sssd ad trusted sub domain do not inherit fallbacks and overrides settings
  * sssd_be crashes when ldap_search_base cannot be parsed.
  * sssd_be aborts a request if it doesn't match any configured idmap domain
  * sssd_be should hint about increasing the krb5_auth_timeout if krb5 auth times out
  * Warn with a user-friendly error message when permissions on sssd.conf are incorrect
  * sudo rules time filter is nondeterministic
  * Man page states default_shell option supersedes other shell options but in fact override_shell does.
  * SSSD needs to enable FAST by default</changelog>
<changelog author="ddiss@suse.com" date="1399377600">- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch</changelog>
<changelog author="varkoly@suse.com" date="1399982400">- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.</changelog>
<changelog author="ckornacker@suse.com" date="1402574400">- fix %postun to not erroneously remove sss pam module (bnc#876667)</changelog>
<changelog author="lchiquitto@suse.com" date="1408708800">- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242)</changelog>
<changelog author="ddiss@suse.com" date="1424865600">- Remove unused functions conflicting with Samba types; (bnc#919519).
  + 0001-Signals-Remove-unused-functions.patch</changelog>
<changelog author="hguo@suse.com" date="1438862400">- Let the main package obsolute/provide libsss_sudo package, because
  sudo capability is an integral component in SSSD daemon.
  (bsc#939249)</changelog>
<changelog author="hguo@suse.com" date="1441195200">- Relabel patch to fix its sequence number:
  0001-Signals-Remove-unused-functions.patch -&gt; 0002-Signals-Remove-unused-functions.patch
- Add patch 0003-SSH-Allow-newline-at-the-end-of-public-key-values-in.patch
  to resolve an issue with incorrect interpretation of line breaks in sshPublicKey attribute.
  (bsc#941121)</changelog>
<changelog author="hguo@suse.com" date="1446206400">- Do not permit user session before SSSD starts. bsc#926961
- Redo fix for bsc#939249 by using rpm Requires.</changelog>

</package>

<package pkgid="794c1cde9d46214e4f2952d3e14ecd56f82a355ae2ec64af110fd4f84417dd48" name="suse-xsl-stylesheets" arch="noarch">
    <version epoch="0" ver="2.0.3.1" rel="6.2"/>

<changelog author="fsundermeyer@opensuse.org" date="1389700800">Version 2.0~beta2:
- Stylesheets 2013:
  * Improvements for monospace handling in HTML and FO
  * FO: use sans-serif font for formalpara titles
  * FO: fixed ambigious template matches
  * HTML: Improvements for print output
  * Bugfixes:
    o ticket #210: PDF Output of Articles: Publication Date Missing
- Stylesheets 2005:
  * fixed an issue that caused a recursion when building HTML
- Nocdoc
  * New elements:
    o blockquote — A quotation set off from the main text
    o email
    o highlights — A summary of the main points of the discussed component
    o literallayout — A block of text in which line breaks and white
    space are to be reproduced faithfully
    o uri — A Uniform Resource Identifier
  * Changed Content Models
    o article:
    allow optional titleabbrev (useful for TOCs)
    allow abstract or highlights after article "header"
    allow optional simplelist after article header
    o entry:
    allow optional literallayout
    o textobject
    Added #PCDATA (normal text) in addition to phrase
    o refmeta
    added zero or more refmiscinfo
    o refnamediv
    Added uri
    o prompt, systemitem, varname
    allow replaceable
  * Changed List of Attributes
    o Mostly non-intrusive and optional role and remap attributes</changelog>
<changelog author="rsalevsky@suse.com" date="1397563200">Version 2.0~beta3:
- 2013 Stylesheets
  * PDF output: Hyphenate URLs as workaround for FOP issue (daps#135)
  * HTML output: When using --meta, output only one file name per
    information box
  * HTML output: Support for os="hidden"
  * HTML output: light frames for figures
- 2005 Stylesheets:
  * HTML output: When using --meta, multiple file names would sometimes
  erroneously be output in the information boxes
- Novdoc:
  * Add some basic missing attributes to uri element</changelog>
<changelog author="sknorr@suse.de" date="1400673600">Version 2.0~beta4:
- 2013 Stylesheets:
  + PDF output: support building from &lt;sect1/&gt; or &lt;section/&gt; root
    ID
  + HTML output: simplified CSS
  + HTML output: support for &lt;inlinemediaobject/&gt;
  + HTML output: make remarks more visible
  + HTML output: some tweaks for layout of tables
  + HTML output: fix Chromium web font issue
  + HTML output: correct classes used for output of &lt;prompt/&gt;
  + HTML output: add SUSE Manager 2.1 to products known to JS</changelog>
<changelog author="sknorr@suse.de" date="1403006400">- Update TAR archive to 2.0 beta 5
- 2005 Stylesheets:
  + HTML output: avoid copying too many graphics, use static
    directory properly (bnc#882647)
- 2013 Stylesheets:
  + HTML output: improve font loading (again)
  + HTML output: less clutter in TOCs
  + HTML output: pure CSS fallback for bubble TOC
  + HTML output: some smaller CSS fixes
  + PDF output: avoid page breaks that only happen because of
    (invisible) indexterms
  + PDF output: improve article cover/TOC page
  + PDF output: support arch profiling attribute
  + PDF output: simpler admonitions</changelog>
<changelog author="SKnorr@novell.com" date="1404216000">- Update TAR archive to 2.0 beta 6 (r4127)
- 2005 stylesheets
- 2013 stylesheets
  + PDF output: keep admonitions together
  + PDF output: better display of &lt;author/&gt;s directly within
    &lt;articleinfo/&gt;
  + PDF output: allow &lt;formalpara/&gt; to use arch attributes, better
    formatting for &lt;formalpara/&gt;
  + PDF/HTML output: in &lt;xref/&gt;, print name of book only once
  + PDF output: fix headline style in articles
  + PDF output: fix table of contents to correctly display
    &lt;section/&gt;s
  + HTML output: use more independent variants of new stylesheets
    that allow for separate styleroots
  + HTML output: add an openSUSE style
- Novdoc:
  + add &lt;releaseinfo/&gt; tag</changelog>
<changelog author="SKnorr@novell.com" date="1404302400">- Update TAR archive to RC1
- 2013 stylesheets
  + PDF output: fix creator strings
  + HTML output: fix vanishing TOC bubble in non-single HTML
    articles
  + HTML output: fix TOC bubble for articles with appendixes</changelog>
<changelog author="sknorr@suse.de" date="1406289600">Version 2.0 RC2:
- 2013 stylesheets
  + all: use simpler version.xsl file
  + all: more useful output for ulinks that only have a space character
  in them
  + PDF output: allow manual page breaks via &lt;?pdfpagebreak?&gt;
  + PDF output: left-align text in table of content and titles of formal
  elements
  + PDF output: unclutter tables of content a little by limiting
  formatting
  + PDF output: fix font scaling in xrefs
  + PDF output: improve page-break behavior of lists
  + PDF output: better overflow handling for the footer
  + PDF output: mention all appendixes in the table of contents
  + HTML output: use (correctly-scaled) Geeko as openSUSE logo
- 2005 stylesheets
  + all: add version.xsl file
  + PDF output: allow manual page breaks via &lt;?pdfpagebreak?&gt;</changelog>
<changelog author="sknorr@suse.de" date="1407844800">- package fixes:
  + quell RPM Lint warning about the Liberation font package being
    an explicit library dependency
  + require "docbook_4" instead of generic "docbook"</changelog>
<changelog author="toms@opensuse.org" date="1411473600">Version 2.0 RC3:
- 2013 stylesheets
  + Reverted static-dir in HTML
  + Improved FO: guimenus for zh_*
  + Improved FO: corrected font sizes for zh_TW</changelog>
<changelog author="toms@opensuse.org" date="1411646400">Version 2.0 RC4:
- 2013 stylesheets:
  + Added feedback from linguistic review (thanks Patrick!)
  + Fixed intra book refs
  + Fixed remarks in variablelists
  + Fixed Korean: switched back to UnBatang instead of Nanum
    (kerning problems)</changelog>
<changelog author="toms@opensuse.org" date="1424347200">- Slightly adapted %post and %postun section to fix bsc#918565</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1429876800">New release 2.0~rc5
  New Features:
  * support for DocBook5 - the xsl-ns variants are located in the following
  directories:
  - /usr/share/xml/docbook/stylesheet/daps2013-ns
  - /usr/share/xml/docbook/stylesheet/opensuse2013-ns
  - /usr/share/xml/docbook/stylesheet/suse-ns
  - /usr/share/xml/docbook/stylesheet/suse2013-ns
  * the DocBook5 variants are automatically generated with a slghtly adopted
  version of xslns-build from upstream
  * SUSE aspell dictionary was moved from DAPS to this package; wordlist
  was updated
  * started a NovDoc version for DocBook 5: susedoc5
  Bugfixes:
  * language fixes for Chinese, Korean, and Japanese
  * Fixed issue #29: Make Parameter runinhead.default.title.end.punct
  L10N Compatible
  * Fixed sf-issue #246 Allow More Information in Side Regions When in Draft Mode
  * Fixed sf-issue #243 Support Sorting of Acronym in Glossaries in HTML
  * Fixed sf-issue #241:  Allow dir attribute in Novdoc DTD
  * Fixed bold.replacement.color and italic.replacement.color parameter for XEP
  * Fix for guimenus: Use 'inherit' instead of 'transparent' as this value
  seems not supported by XEP.
  * Novdoc: Missing remap for ulink added</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1430136000">- fix for rpm installation error</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1434024000">New release 2.0-rc6:
  * added SUSEdoc, a fully DocBook 5 compatible schema with a subset
  of DocBook commands (like NovDoc for DocBook 4)
  * package now supports installation of different schema/DTD versions
  in parallel
  * schemas are located at /usr/share/xml/suse/schema</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1434715200">Stable release 2.0
- added latest products to .js file to create correct Bugzilla
  links in Draft mode</changelog>
<changelog author="toms@suse.de" date="1435060800">- Update package for bsc#928012 (SLE12)</changelog>
<changelog author="toms@opensuse.org" date="1435838400">Stable release 2.0.1
- Schema
  . Enabled subtitle and textobject (susedoc5.rnc)
- Stylesheets
  . Changed bugzilla component to 'Documentation' for SLERT
    (suse2013/static/js/script.js)
  . Added missing subtitle for articles
    suse2013/fo/article.titlepage.templates.xsl
- Infrastructure
  . Trying to fix an undef value error (bin/xslns-build)</changelog>
<changelog author="toms@suse.de" date="1436184000">- Update package 2.0.1 for bsc#936253 (SLES12)</changelog>
<changelog author="toms@opensuse.org" date="1436270400">Stable release 2.0.2
- Fixed font issue for bsc#937209
- Everything (incl. schemas) that is generated now goes to build/</changelog>
<changelog author="toms@suse.de" date="1445515200">Stable release 2.0.3.1 (only for OBS):
  (Fixes bsc#951717)
- Stylesheets:
  . Fixed #46: (PDF) Admonition titles with normal font weight
  . Fixed #50: (PDF) Product name/version displayed on cover and in footer of
    DocBook-5-generated books
  . (PDF) Do not generate transparent text in CJK books
  . Improved Fix for #36: (XHTML) Bugzilla links are only generated where
    necessary
  . Fixed #55: (XHTML) Make callouts uncopyable
  . (XHTML) Fix display of screens and long commands in screen
- Infrastructure:
  . no changes</changelog>

</package>

<package pkgid="e5df081ef71e5c0f7107f3db799564156be4e23caf331d888a07de395628dec4" name="suse-xsl-stylesheets" arch="src">
    <version epoch="0" ver="2.0.3.1" rel="6.2"/>

<changelog author="fsundermeyer@opensuse.org" date="1389700800">Version 2.0~beta2:
- Stylesheets 2013:
  * Improvements for monospace handling in HTML and FO
  * FO: use sans-serif font for formalpara titles
  * FO: fixed ambigious template matches
  * HTML: Improvements for print output
  * Bugfixes:
    o ticket #210: PDF Output of Articles: Publication Date Missing
- Stylesheets 2005:
  * fixed an issue that caused a recursion when building HTML
- Nocdoc
  * New elements:
    o blockquote — A quotation set off from the main text
    o email
    o highlights — A summary of the main points of the discussed component
    o literallayout — A block of text in which line breaks and white
    space are to be reproduced faithfully
    o uri — A Uniform Resource Identifier
  * Changed Content Models
    o article:
    allow optional titleabbrev (useful for TOCs)
    allow abstract or highlights after article "header"
    allow optional simplelist after article header
    o entry:
    allow optional literallayout
    o textobject
    Added #PCDATA (normal text) in addition to phrase
    o refmeta
    added zero or more refmiscinfo
    o refnamediv
    Added uri
    o prompt, systemitem, varname
    allow replaceable
  * Changed List of Attributes
    o Mostly non-intrusive and optional role and remap attributes</changelog>
<changelog author="rsalevsky@suse.com" date="1397563200">Version 2.0~beta3:
- 2013 Stylesheets
  * PDF output: Hyphenate URLs as workaround for FOP issue (daps#135)
  * HTML output: When using --meta, output only one file name per
    information box
  * HTML output: Support for os="hidden"
  * HTML output: light frames for figures
- 2005 Stylesheets:
  * HTML output: When using --meta, multiple file names would sometimes
  erroneously be output in the information boxes
- Novdoc:
  * Add some basic missing attributes to uri element</changelog>
<changelog author="sknorr@suse.de" date="1400673600">Version 2.0~beta4:
- 2013 Stylesheets:
  + PDF output: support building from &lt;sect1/&gt; or &lt;section/&gt; root
    ID
  + HTML output: simplified CSS
  + HTML output: support for &lt;inlinemediaobject/&gt;
  + HTML output: make remarks more visible
  + HTML output: some tweaks for layout of tables
  + HTML output: fix Chromium web font issue
  + HTML output: correct classes used for output of &lt;prompt/&gt;
  + HTML output: add SUSE Manager 2.1 to products known to JS</changelog>
<changelog author="sknorr@suse.de" date="1403006400">- Update TAR archive to 2.0 beta 5
- 2005 Stylesheets:
  + HTML output: avoid copying too many graphics, use static
    directory properly (bnc#882647)
- 2013 Stylesheets:
  + HTML output: improve font loading (again)
  + HTML output: less clutter in TOCs
  + HTML output: pure CSS fallback for bubble TOC
  + HTML output: some smaller CSS fixes
  + PDF output: avoid page breaks that only happen because of
    (invisible) indexterms
  + PDF output: improve article cover/TOC page
  + PDF output: support arch profiling attribute
  + PDF output: simpler admonitions</changelog>
<changelog author="SKnorr@novell.com" date="1404216000">- Update TAR archive to 2.0 beta 6 (r4127)
- 2005 stylesheets
- 2013 stylesheets
  + PDF output: keep admonitions together
  + PDF output: better display of &lt;author/&gt;s directly within
    &lt;articleinfo/&gt;
  + PDF output: allow &lt;formalpara/&gt; to use arch attributes, better
    formatting for &lt;formalpara/&gt;
  + PDF/HTML output: in &lt;xref/&gt;, print name of book only once
  + PDF output: fix headline style in articles
  + PDF output: fix table of contents to correctly display
    &lt;section/&gt;s
  + HTML output: use more independent variants of new stylesheets
    that allow for separate styleroots
  + HTML output: add an openSUSE style
- Novdoc:
  + add &lt;releaseinfo/&gt; tag</changelog>
<changelog author="SKnorr@novell.com" date="1404302400">- Update TAR archive to RC1
- 2013 stylesheets
  + PDF output: fix creator strings
  + HTML output: fix vanishing TOC bubble in non-single HTML
    articles
  + HTML output: fix TOC bubble for articles with appendixes</changelog>
<changelog author="sknorr@suse.de" date="1406289600">Version 2.0 RC2:
- 2013 stylesheets
  + all: use simpler version.xsl file
  + all: more useful output for ulinks that only have a space character
  in them
  + PDF output: allow manual page breaks via &lt;?pdfpagebreak?&gt;
  + PDF output: left-align text in table of content and titles of formal
  elements
  + PDF output: unclutter tables of content a little by limiting
  formatting
  + PDF output: fix font scaling in xrefs
  + PDF output: improve page-break behavior of lists
  + PDF output: better overflow handling for the footer
  + PDF output: mention all appendixes in the table of contents
  + HTML output: use (correctly-scaled) Geeko as openSUSE logo
- 2005 stylesheets
  + all: add version.xsl file
  + PDF output: allow manual page breaks via &lt;?pdfpagebreak?&gt;</changelog>
<changelog author="sknorr@suse.de" date="1407844800">- package fixes:
  + quell RPM Lint warning about the Liberation font package being
    an explicit library dependency
  + require "docbook_4" instead of generic "docbook"</changelog>
<changelog author="toms@opensuse.org" date="1411473600">Version 2.0 RC3:
- 2013 stylesheets
  + Reverted static-dir in HTML
  + Improved FO: guimenus for zh_*
  + Improved FO: corrected font sizes for zh_TW</changelog>
<changelog author="toms@opensuse.org" date="1411646400">Version 2.0 RC4:
- 2013 stylesheets:
  + Added feedback from linguistic review (thanks Patrick!)
  + Fixed intra book refs
  + Fixed remarks in variablelists
  + Fixed Korean: switched back to UnBatang instead of Nanum
    (kerning problems)</changelog>
<changelog author="toms@opensuse.org" date="1424347200">- Slightly adapted %post and %postun section to fix bsc#918565</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1429876800">New release 2.0~rc5
  New Features:
  * support for DocBook5 - the xsl-ns variants are located in the following
  directories:
  - /usr/share/xml/docbook/stylesheet/daps2013-ns
  - /usr/share/xml/docbook/stylesheet/opensuse2013-ns
  - /usr/share/xml/docbook/stylesheet/suse-ns
  - /usr/share/xml/docbook/stylesheet/suse2013-ns
  * the DocBook5 variants are automatically generated with a slghtly adopted
  version of xslns-build from upstream
  * SUSE aspell dictionary was moved from DAPS to this package; wordlist
  was updated
  * started a NovDoc version for DocBook 5: susedoc5
  Bugfixes:
  * language fixes for Chinese, Korean, and Japanese
  * Fixed issue #29: Make Parameter runinhead.default.title.end.punct
  L10N Compatible
  * Fixed sf-issue #246 Allow More Information in Side Regions When in Draft Mode
  * Fixed sf-issue #243 Support Sorting of Acronym in Glossaries in HTML
  * Fixed sf-issue #241:  Allow dir attribute in Novdoc DTD
  * Fixed bold.replacement.color and italic.replacement.color parameter for XEP
  * Fix for guimenus: Use 'inherit' instead of 'transparent' as this value
  seems not supported by XEP.
  * Novdoc: Missing remap for ulink added</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1430136000">- fix for rpm installation error</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1434024000">New release 2.0-rc6:
  * added SUSEdoc, a fully DocBook 5 compatible schema with a subset
  of DocBook commands (like NovDoc for DocBook 4)
  * package now supports installation of different schema/DTD versions
  in parallel
  * schemas are located at /usr/share/xml/suse/schema</changelog>
<changelog author="fsundermeyer@opensuse.org" date="1434715200">Stable release 2.0
- added latest products to .js file to create correct Bugzilla
  links in Draft mode</changelog>
<changelog author="toms@suse.de" date="1435060800">- Update package for bsc#928012 (SLE12)</changelog>
<changelog author="toms@opensuse.org" date="1435838400">Stable release 2.0.1
- Schema
  . Enabled subtitle and textobject (susedoc5.rnc)
- Stylesheets
  . Changed bugzilla component to 'Documentation' for SLERT
    (suse2013/static/js/script.js)
  . Added missing subtitle for articles
    suse2013/fo/article.titlepage.templates.xsl
- Infrastructure
  . Trying to fix an undef value error (bin/xslns-build)</changelog>
<changelog author="toms@suse.de" date="1436184000">- Update package 2.0.1 for bsc#936253 (SLES12)</changelog>
<changelog author="toms@opensuse.org" date="1436270400">Stable release 2.0.2
- Fixed font issue for bsc#937209
- Everything (incl. schemas) that is generated now goes to build/</changelog>
<changelog author="toms@suse.de" date="1445515200">Stable release 2.0.3.1 (only for OBS):
  (Fixes bsc#951717)
- Stylesheets:
  . Fixed #46: (PDF) Admonition titles with normal font weight
  . Fixed #50: (PDF) Product name/version displayed on cover and in footer of
    DocBook-5-generated books
  . (PDF) Do not generate transparent text in CJK books
  . Improved Fix for #36: (XHTML) Bugzilla links are only generated where
    necessary
  . Fixed #55: (XHTML) Make callouts uncopyable
  . (XHTML) Fix display of screens and long commands in screen
- Infrastructure:
  . no changes</changelog>

</package>

<package pkgid="ef267120d0a4c61ef1a8f83904efad7ac25931c46ed81b186d4cad54b358f61d" name="target-isns" arch="src">
    <version epoch="0" ver="0.3" rel="6.1"/>

<changelog author="lduncan@suse.com" date="1411646400">- First attempt at importing this github project
  into OBS</changelog>
<changelog author="lduncan@suse.com" date="1415361600">- update use of _BSD_SOURCE to use _DEFAULT_SOUCE, adding patch:
  target-isns-update-BSD-SOURCE-to-DEFAULT-SOURCE.patch</changelog>
<changelog author="lduncan@suse.com" date="1415880000">- Added all changes upstream since version 0.3, since
  I needed the man page and it's included. This also meant
  updating the spec file to list the man page.
  Added patch, taken straight from 'git diff v0.3..HEAD':
  target-isns-changes-since-v0.3.diff.bz2</changelog>
<changelog author="lduncan@suse.com" date="1415880001">- Added systemd support, adding patch:
  target-isns-add-systemd-support.patch</changelog>
<changelog author="lduncan@suse.com" date="1417780800">- Cleaned up spec file, added rctarget-isns symlink</changelog>
<changelog author="lduncan@suse.com" date="1424779200">- Cloned project from openSUSE:Factory
  (FATE#317929, bug#919324)</changelog>
<changelog author="lduncan@suse.com" date="1444996800">- Handle 2 places isnsd was handling IP addresses
  incorrectly, assuming big-endian architecture (bsc#950366),
  adding two patches:
  * target-isns-handle-big-endian-arch.patch
  * target-isns-fix-remaining-little-endian-IP-addr.patch</changelog>

</package>

<package pkgid="fed34bd872cc1cb138bc144f88e314aeeb39c64db084358c7055bee8e659e949" name="target-isns" arch="x86_64">
    <version epoch="0" ver="0.3" rel="6.1"/>

<changelog author="lduncan@suse.com" date="1411646400">- First attempt at importing this github project
  into OBS</changelog>
<changelog author="lduncan@suse.com" date="1415361600">- update use of _BSD_SOURCE to use _DEFAULT_SOUCE, adding patch:
  target-isns-update-BSD-SOURCE-to-DEFAULT-SOURCE.patch</changelog>
<changelog author="lduncan@suse.com" date="1415880000">- Added all changes upstream since version 0.3, since
  I needed the man page and it's included. This also meant
  updating the spec file to list the man page.
  Added patch, taken straight from 'git diff v0.3..HEAD':
  target-isns-changes-since-v0.3.diff.bz2</changelog>
<changelog author="lduncan@suse.com" date="1415880001">- Added systemd support, adding patch:
  target-isns-add-systemd-support.patch</changelog>
<changelog author="lduncan@suse.com" date="1417780800">- Cleaned up spec file, added rctarget-isns symlink</changelog>
<changelog author="lduncan@suse.com" date="1424779200">- Cloned project from openSUSE:Factory
  (FATE#317929, bug#919324)</changelog>
<changelog author="lduncan@suse.com" date="1444996800">- Handle 2 places isnsd was handling IP addresses
  incorrectly, assuming big-endian architecture (bsc#950366),
  adding two patches:
  * target-isns-handle-big-endian-arch.patch
  * target-isns-fix-remaining-little-endian-IP-addr.patch</changelog>

</package>

<package pkgid="546e5b3ede7c20e35ef5c2d32a09a33c63a3ae4ff86734101f3e4b69c6de9561" name="target-isns-debuginfo" arch="x86_64">
    <version epoch="0" ver="0.3" rel="6.1"/>

<changelog author="lduncan@suse.com" date="1411646400">- First attempt at importing this github project
  into OBS</changelog>
<changelog author="lduncan@suse.com" date="1415361600">- update use of _BSD_SOURCE to use _DEFAULT_SOUCE, adding patch:
  target-isns-update-BSD-SOURCE-to-DEFAULT-SOURCE.patch</changelog>
<changelog author="lduncan@suse.com" date="1415880000">- Added all changes upstream since version 0.3, since
  I needed the man page and it's included. This also meant
  updating the spec file to list the man page.
  Added patch, taken straight from 'git diff v0.3..HEAD':
  target-isns-changes-since-v0.3.diff.bz2</changelog>
<changelog author="lduncan@suse.com" date="1415880001">- Added systemd support, adding patch:
  target-isns-add-systemd-support.patch</changelog>
<changelog author="lduncan@suse.com" date="1417780800">- Cleaned up spec file, added rctarget-isns symlink</changelog>
<changelog author="lduncan@suse.com" date="1424779200">- Cloned project from openSUSE:Factory
  (FATE#317929, bug#919324)</changelog>
<changelog author="lduncan@suse.com" date="1444996800">- Handle 2 places isnsd was handling IP addresses
  incorrectly, assuming big-endian architecture (bsc#950366),
  adding two patches:
  * target-isns-handle-big-endian-arch.patch
  * target-isns-fix-remaining-little-endian-IP-addr.patch</changelog>

</package>

<package pkgid="24f442e15c6075fbc7d096d65984b6f96390866891ad9d415053c6c5c259e3ca" name="target-isns-debugsource" arch="x86_64">
    <version epoch="0" ver="0.3" rel="6.1"/>

<changelog author="lduncan@suse.com" date="1411646400">- First attempt at importing this github project
  into OBS</changelog>
<changelog author="lduncan@suse.com" date="1415361600">- update use of _BSD_SOURCE to use _DEFAULT_SOUCE, adding patch:
  target-isns-update-BSD-SOURCE-to-DEFAULT-SOURCE.patch</changelog>
<changelog author="lduncan@suse.com" date="1415880000">- Added all changes upstream since version 0.3, since
  I needed the man page and it's included. This also meant
  updating the spec file to list the man page.
  Added patch, taken straight from 'git diff v0.3..HEAD':
  target-isns-changes-since-v0.3.diff.bz2</changelog>
<changelog author="lduncan@suse.com" date="1415880001">- Added systemd support, adding patch:
  target-isns-add-systemd-support.patch</changelog>
<changelog author="lduncan@suse.com" date="1417780800">- Cleaned up spec file, added rctarget-isns symlink</changelog>
<changelog author="lduncan@suse.com" date="1424779200">- Cloned project from openSUSE:Factory
  (FATE#317929, bug#919324)</changelog>
<changelog author="lduncan@suse.com" date="1444996800">- Handle 2 places isnsd was handling IP addresses
  incorrectly, assuming big-endian architecture (bsc#950366),
  adding two patches:
  * target-isns-handle-big-endian-arch.patch
  * target-isns-fix-remaining-little-endian-IP-addr.patch</changelog>

</package>

<package pkgid="4d119fa7d46576733d0c5cb03c7812e75d8c592fb31ed1600fbfd3153a1e075a" name="typelib-1_0-Libosinfo-1_0" arch="x86_64">
    <version epoch="0" ver="0.2.12" rel="10.1"/>

<changelog author="dimstar@opensuse.org" date="1328788800">- Update to version 0.1.0:
  + Add Utility function to retrieve OS devices by property.
  + Improved OS media detection.
  + Add missing 'const' OsinfoList function params.
  + Use ENV{} in udev rule.</changelog>
<changelog author="dimstar@opensuse.org" date="1334318400">- Update to version 0.1.1:
  + Fixes the OS media detection
  + Add support fro more OSs: NetBSD and Mandrake
  + More complete and fixed data
  + Add support for install tree metadata
  + Add support for filtering products cased on release/EOL dates.
  + Add support for product codenames.
  + Add support for 'distro'.
  + Also extract application ID from ISO9660 media.
  + Add test cases for validating ISO9660 data.
  + Disable obsolete media URLs.
  + Standardize OS family names as all lowercase.
  + Standardize format for OS id, short-id, distro, version.
  + Add RNG schema for database files.
  + Add a 'osinfo-db-validate' command for verifying database files
  + Add a 'osinfo-query' command for searching/listing information
    from database.
  + Add a man page for the osinfo-detect command.
  + Add support for loading extra local database files. By default,
    libosinfo will expect them to be in /etc/libosinfo/db and
    $HOME/.local/config/libosinfo/db  but new API is provided to
    change this behavior.
  + Fix generation of docs in a VPATH builder.
  + Fix loading of vendor and product names of USB and PCI devices.
  + Remove obsolete scripts for PCI/USB id conversion.
  + Remove redundant generic linux entries from database.
  + Fixes for 'make dist'.
  + Actually handle '--enable-vala' configure option and don't
    mandate vapigen if this option is not specified.
  + Add missing export of osinfo_entity_set_param.
  + Various other fixes and improvements.
- Add pkgconfig(libsoup-2.4) and pkgconfig(libsoup-gnome-2.4)
  BuildRequires: new upstream dependencies.</changelog>
<changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.2:
  + Fix udev rules for CDROM media.
  + Fix build against newer glibc-headers when building with -O0.
  + More complete/up2date data for:
  - Fedora 17
  - Ubuntu
  - Windows
  + Fix data for:
  - Ubuntu
  + Correct order of elements returned by list union functions.</changelog>
<changelog author="dimstar@opensuse.org" date="1346673600">- Update to version 0.2.0:
  + Fix build against mingw64 toolchain.
  + API for getting product logo URLs.
  + Fix architecture for a Windows 2008 media.
  + Remove bogus minimum storage information for Fedora.
  + Add varirables for system and local database paths in
    pkg-config.
- Add pkgconfig(libxslt) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1350129600">- Update to version 0.2.1:
  + Fix and simplify udev rule.
  + Fedora:
  - Fix minimum RAM requirements for F16 and F17.
  + Add data on:
  - Fedora 18
  - GNOME 3.6
  - Ubuntu 12.10
  + Fixes to doc build.
  + Install script:
  - Add get_config_param method.
  - Differenciate between expected/output script names.
  - Add more utility functions.
  + Add 'installer-reboots' parameter to medias.
  + osinfo-detect does not die of DB loading errors anymore.
  + More type-specific entity value getters/setters.
  + Fixe and update RNG file.
  + Add 'subsystem' property/attribute to devices.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.2.2:
  + Loads of improvements and fixes to installer APIs and scripts.
  + Add API for information on downloadable device drivers.
  + Add/improve data on: RHEL, Windows 7, Windows 8, Windows XP.
  + Enable translations for many (potential) user-visible strings.
  + Correct default value for OsinfoMedia::installer-reboots.
  + Register enum types with gobject type system.
  + Add enum param getter/setter helpers.
  + OsinfoList is now instantiable and all its subclasses has been
    deprecated.
  + Various other fixes and improvements.
- Add intltool BuildRequires: needed for changes in the build
  system for translations.
- Add translation-related packaging machinery (lang subpackage, and
  Recommends for it in the main subpackage), but keep it disabled
  with a %{with_lang} macro for now as there is no translation yet.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 0.2.3:
  + Add datamaps for translating OS-neutral values to OS-specific
    ones, e.g some installer configuration parameters like
    keyboard, language and timezone etc.
  + New API to detect media that makes it possible to also query
    languages supported by the media.
  + Add install scripts for:
  - RHEL 6.x.
  - Microsoft Windows 8
  + Fix install script for Fedora 18.
  + Drop support for encoding in l10n install script configuration
    parameters.
  + Fix test build issues.
  + Fixes and improvements to documentation.
  + Fix potential issues spotted by Coverity.
  + Fix build for translations.
  + osinfo-install-script tool now has options to list available
    configuration parameters and profiles.
  + Add/improve data on:
  - RHEL
  - Debian
  - openSUSE
  - Microsoft Windows 7
  - Ubuntu
  - MacOS X
  + Updated translations.
- Enable translations: change with_lang defines to 1 as there are
  now translations available.</changelog>
<changelog author="dimstar@opensuse.org" date="1363089600">- Update to version 0.2.5:
  + Make use of post-installation drivers in Windows 7 install
    scripts.
  + Windows 7 install script now requires product key.
  + Actually add install scripts for Windows 8. This was supposed
    to be merged in release 0.2.3.
  + Formalize architecture names in DB to align with libvirt.
  + Fixes to mingw RPM spec from Fedora.
  + Add a Windows 7 volume ID to DB.
- Changes from version 0.2.4:
  + Fix crash in osinfo-detect against non-bootable media.
  + osinfo-install-script now displays names of generated files.
  + Add an all-in-one virtio and QXL device driver setup binary to
    Windows XP and 7.
  + Make use of post-installation drivers in Windows XP installer
    scripts.
  + Log post-install commands of Windows XP to target disk.
  + Add/improve/fix data on:
  - QEMU/QEMU-KVM hypervisor
  - GNOME
  - openSUSE
  + RPM spec file changes (shipped template).
  + Adapt to glib 2.36.
  + Fix some build warnings.
  + Some other fixes and improvements.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.2.6:
  + New API to:
  - query signed status of device drivers.
  - query device driver signing requirement of installer scripts.
  - enable/disable installer script driver signing checks.
  + Use system-installed pci.ids/usb.ids files, if available.
  + Don't ignore vendor/device names from pci.ids/usb.ids files.
  + Corrections to RPM spec.</changelog>
<changelog author="dimstar@opensuse.org" date="1368532800">- Update to version 0.2.7:
  + Add/improve/fix data on: CentOS 6.*, Fedora 19, GNOME 3.8,
    openSUSE 12.3, RHEL 6.4 and Ubuntu 13.04.
  + Add testcases for media detection.
  + Installer script fixes/improvements:
  - Setup user avatar for Windows 7.
  - Fix against old RHEL and Fedora.
  - Specify installation method for Fedora.
  + New API:
  - osinfo_platform_get_all_devices().
  - osinfo_install_script_generate_command_line().
  + Build fixes.
  + Some portability improments/fixes.
  + Fixes `make syntax-check`.
  + More docs and fixes to existing docs.</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 0.2.8:
  + Add/improve/fix data on: ALTLinux, Fedora 19, Fedora 20,
    FreeBSD, GNOME 3.8, GNOME 3.10, Microsoft Windows 7, QEMU and
    Ubuntu.
  + Add testcases for media detection: Microsoft Windows Server
    2008 R2.
  + Fix export of public API.
  + Hide private API.
  + Fix a parallel build issue.
  + Fix build against latest intltool.
  + Drop usage of deprecated API.</changelog>
<changelog author="dimstar@opensuse.org" date="1387195200">- Update to version 0.2.9:
  + Add/improve/fix data on:
  - Debian
  - Fedora 20
  - GNOME continuous 3.12
  - Mageia
  - Microsoft Windows 7
  - Microsoft Windows 8.1
  - RHEL 5.8
  - RHEL 6.5
  - RHEL 7.0
  + Support '&lt;foo/&gt;' syntax for booleans in database, in addition
    to existing '&lt;foo&gt;true&lt;/foo&gt;'.
  + New API/XML to determine/specify:
  - If an OS is an actual release, a pre-release or a development
    snapshot.
  - Variants of an OS. For example, professional, enterprise and
    ultimate editions of Windows OSs and workstation and server
    variants of RHEL etc.
  + Various fixes to build system.
  + More testcases.
  + Some other minor fixes/changes.</changelog>
<changelog author="mgorse@suse.com" date="1395921600">- Update to version 0.2.10:
  + Add API and option to osinfo-install-script utility that
    allows you to query the available methods to inject the
    installer script to the installation process.
  + Add JEOS installer scripts for Debian and Ubuntu.
  + Disable installer script for Windows 8.1 as its known not to work.
  + Allow XML special chars in installer script configuration values.
  + Fix a few build issues.
  + Add/improve/fix data on:
  - Debian
  - Fedora
  - FreeBSD
  - Mandrake
  - Mandriva
  - Microsoft Windows 7
  - openSUSE
  - Solaris
  - Ubuntu
  - Qemu</changelog>
<changelog author="dimstar@opensuse.org" date="1408536000">- Update to version 0.2.11:
  + Document hostname limitations.
  + Export OSINFO_*_VERSION macros.
  + Add desktop scripts for Debian.
  + Add API to query install scripts if they require an internet
    connection.
  + Some fixes to Debian JEOS script.
  + Add/improve/fix data on:
  - CentOS
  - Debian
  - FreeBSD
  - Microsoft Windows 7
  - Microsoft Windows 8
  - Microsoft Windows Server 2012
  - Microsoft Vista
  - OpenBSD
  - OpenSUSE
  - Red Hat Enterprise Linux 7
  + More ISO detection testcases.
  + Many performance improvements.
  + Fixes to documentation.
  + Fixes to build.</changelog>
<changelog author="carnold@suse.com" date="1432814400">- Update to version 0.2.12:
  + Add API to get/set ISO9660 volume size of media.
  + Make use of volume size of ISO files for detection. This
    enables us to differentiate between DVD and netiso of Fedora,
    for example.
  + Allow install trees to be associated with specific variants of
    the OS.
  + Use direct HTTPS URLs to drivers.
  + Install scripts
  - Add API to generate script against a particular media.
  - Fix Fedora script to work with netiso.
  - Bigger /boot partition for Fedora and RHEL.
  - Don't specify network interface for Fedora and RHEL.
  + Add/improve/fix data on:
  - Debian 8.0
  - Fedora (all versions)
  - GNOME 3.14
  - Microsoft Windows Vista, 7 and 8.1.
  - OpenBSD 5.6
  - openSUSE
  - RHEL 5.9-11, 6.6 and Atomic 7.0.
  - SUSE
  - Ubuntu 14.04 and 15.04.
  + Fix some leaks.
  + Fix and add some API documentation.
  + Many build fixes.</changelog>
<changelog author="carnold@suse.com" date="1433160000">- fate#318394: Update virt-manager to the most current released
  version (requires libosinfo)</changelog>
<changelog author="carnold@suse.com" date="1433505600">- Add support for openSUSE 13.2
  1d08a23c-add-opensuse-13.2-support.patch</changelog>
<changelog author="carnold@suse.com" date="1437393600">- bsc#938843 - Libosinfo has no support for sles/sled 12 sp1
  add-sle12sp1-support.patch
- Add additional support and fixes
  6c3ddecb-add-rhel7.1-support.patch
  7b31e3ac-add-qemu-2.3-support.patch
  a563ad22-fix-fedora-unknown-regexp.patch</changelog>
<changelog author="carnold@suse.com" date="1441368000">- bsc#944605 - Libosinfo is missing an entry for openSUSE Leap 42.1
  add-opensuse-leap-42.1-support.patch</changelog>
<changelog author="lma@suse.com" date="1445515200">- bsc#946157 - The mouse cursor doesn't work during Guest OS
    installation in KVM Mode
  Fix_derives-from_and_add_tablet_item.patch
- Use correct name for openSUSE Leap 42.1</changelog>

</package>

<package pkgid="137491e414eccbe5868d143da15e1835c659100ed5a991a6607135d3c0559211" name="util-linux" arch="src">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="6743c1a7d8fd6128eafbe2afed93af6f1ac315cf8c9e344aabaa924d906f6bb9" name="util-linux" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="839351024069b49696c8b143b0da2951ae15a7d8041e2f0acb020abb0e26b2f4" name="util-linux-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="ed72de9904500356b6a5e644df25caf30aa8c746d760f27621bfde3a85897b3f" name="util-linux-debugsource" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="a2ad31de18885d93c3d7789c22720f950c8f00661e46b0011fd5a2bb715a68a4" name="util-linux-lang" arch="noarch">
    <version epoch="0" ver="2.25" rel="12.2"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="0a9dd3cadf5bca6b4068d20636681341c5fa5661f2de9b4ac25ac67fd3b33e43" name="util-linux-systemd" arch="src">
    <version epoch="0" ver="2.25" rel="12.1"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="0e1f3d57bcc747bf433423e4662cca45c4b8c7473e28e8c8e215922b70ca4697" name="util-linux-systemd" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.1"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="d52baa52f8d673ae868b421d7fc1dd1111e62f74b050c56038d51abae58663e8" name="util-linux-systemd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.1"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="f041e01e4f7e27299d18f77368c9b49134a06cac3492246ab2a540a55a620a66" name="util-linux-systemd-debugsource" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.1"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="bd9581f98d74a37f0a4bedc6b3dde884139ffe53b534b17fb447541d51cecee2" name="uuidd" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.1"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

<package pkgid="1c0dfc58c9b7e9cac6c52b0a147bf6a9b838dd2ab87095496c58a4c3aae933e5" name="uuidd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.25" rel="12.1"/>

<changelog author="sbrabec@suse.cz" date="1418817600">- libblkid: care about unsafe chars and possible buffer overflow
  in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
  util-linux-libblkid-overflow.patch, bsc#907434)</changelog>
<changelog author="sbrabec@suse.cz" date="1421064000">- libblkid: Reset errno in blkid_probe_get_buffer() to prevent
  failing probes (e. g. for exFAT) (util-linux-robust-probe.patch,
  bnc#908742).</changelog>
<changelog author="schwab@linux-m68k.org" date="1421323200">- Use util-linux:/bin/logger as split-provide,
  /usr/lib/systemd/system/fstrim.service didn't exist in 13.1
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1423051200">- Fix mis-compilation of libuuid without uuidd support
  (bnc#900935).
- Fix uuidd socket activation (bnc#900935).
- Remove obsolete sysvinit script for uuidd.
- Remove no more needed uuidd permissions stuff.
- Replace PreReq for obsolete pwdutils by names of binaries.
- Add fstrim service scripts and rcfstrim helper.</changelog>
<changelog author="dimstar@opensuse.org" date="1423224000">- Do not try to unregister an info file (ipc.info.gz) which we do
  not own. Already in May 2011, we stopped registering it: "do not
  register ipc.info.gz (not provided by this package)".
  (See bsc#888678#c72.)</changelog>
<changelog author="sbrabec@suse.cz" date="1424088000">- script: Backport new implementation to fix all known hangs
  (bsc#888678, util-linux-script-backport.patch).
- script.1: Document consequences of script misuse
  (util-linux-script-man-doc-misuse.patch).</changelog>
<changelog author="kkaempf@suse.com" date="1424433600">- Recognize Unisys s-Par as hypervisor (FATE#318231)</changelog>
<changelog author="sbrabec@suse.cz" date="1424865600">- Fix lack of I18N support in util-linux-systemd (mis-compilation).
  (See bsc#900935#c46.)</changelog>
<changelog author="rmilasan@suse.de" date="1429531200">- flock: zero timeout is valid
  (util-linux-flock-zero-timeout-is-valid.patch, bsc#926945).</changelog>
<changelog author="sbrabec@suse.cz" date="1431604800">- script: Fix hang caused by mis-interpreted EOF on big-endian
  (bsc#930236, util-linux-script-mangled-EOF-big-endian.patch).</changelog>
<changelog author="sbrabec@suse.cz" date="1432814400">- Follow multipath-tools partition names configuration
  (bsc#880468, util-linux-fdisk-device-mapper-names.patch).
- Fix recognition of /dev/dm-N partitions names
  (bsc#880468#c11, util-linux-fdisk-dm-partname.patch).
- Fix lsblk -f on devices with nodes in /dev subdirectory
  (bsc#924994, util-linux-fix-cciss-dev-lookup.patch).
- Fix fdisk -l on devices with nodes in /dev subdirectory
  (bsc#924994#c13, util-linux-fix-cciss-sys-lookup.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937600">- Fix mount point lookup (and mount -a) if the path contains //
  (bsc#931955, util-linux-libmount-double-slash.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1433937601">- One-shot reset uuidd service to its default state, socket
  activation, during upgrade to SLE12 SP1
  (bnc#900935#c46, FATE#318949).
- One-shot reset fstrim service and timer to its default state
  to run once weekly during upgrade to SLE12 SP1
  (FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1439985600">- Add licenses.</changelog>
<changelog author="sbrabec@suse.com" date="1440676800">- Add %systemd_preset_pre and %systemd_preset_posttrans that will
  do one shot presetting of uuidd.service (bnc#900935#c46).
- Remove one shot presetting hacks, it is handled by preset scripts
  (bnc#900935#c46, FATE#318949, FATE#317727).</changelog>
<changelog author="sbrabec@suse.com" date="1443009600">- Fix fsck -C {fd} parsing (bsc#923777, bsc#903738,
  util-linux-fsck-C_fd.patch).
- Implement fsck -r {fd} (bsc#923777, bsc#903738,
  util-linux-fsck-implement-fsck-r_fd.patch).
- Add patches to fix lsblk output in some situations (bsc#943415,
  util-linux-lsblk-dependencies.patch,
  util-linux-lsblk-inverse-tree.patch,
  util-linux-lsblk-mountpoint-toplevel.patch).</changelog>
<changelog author="pgajdos@suse.com" date="1444737600">- do not segfault when TERM is not defined or wrong [bnc#903440]
  + util-linux-cal-no-terminal.patch</changelog>
<changelog author="sbrabec@suse.com" date="1444737601">- Prevent colcrt buffer overflow (bsc#949754, CVE-2015-5218,
  util-linux-colcrt-CVE-2015-5218-overflow.patch).</changelog>
<changelog author="sbrabec@suse.com" date="1444996800">- Fix backport bug in util-linux-lsblk-inverse-tree.patch
  (bsc#950778).</changelog>
<changelog author="hare@suse.de" date="1446552000">- losetup: Add support for setting logical blocksizes
  (bsc#931634, FATE#319010)
  + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch</changelog>

</package>

</otherdata>